395 matches found
Fedora: Security Advisory for rust-asahi-nvram (FEDORA-2024-ce2936b568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: rust-asahi-nvram-0.2.1-3.fc40
A tool to read and write nvram variables on ARM Macs...
kernel: bnxt: avoid overflow in bnxt_get_nvram_directory()
In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxtgetnvramdirectory The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplicati...
kernel: bnxt: avoid overflow in bnxt_get_nvram_directory()
In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxtgetnvramdirectory The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplicati...
CVE-2023-52080
IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT-GetVariable function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical...
CVE-2023-52080
IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT-GetVariable function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical...
CVE-2023-52080
IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT-GetVariable function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical...
CVE-2023-52080
CVE-2023-52080 affects IEIT NF5280M6 UEFI firmware up to version 8.4. The root cause is a pool overflow caused by improper use of gRT->GetVariable(), allowing an attacker with access to local NVRAM variables to modify SPI Flash contents, leading to tampered memory data and potential crashes. D...
PT-2024-14388 · Ieit · Ieit Nf5280M6 Uefi Firmware
Name of the Vulnerable Software and Affected Versions: IEIT NF5280M6 UEFI firmware versions through 8.4 Description: The issue is caused by improper use of the gRT-GetVariable function, leading to a pool overflow vulnerability. Attackers with access to local NVRAM variables can exploit this by...
CVE-2023-5912
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-25494
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-25494
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-25494
CVE-2023-25494 targets Lenovo BIOS across Desktop, Smart Edge, and ThinkStation products, allowing a local attacker with high privileges to write to NVRAM variables. The issue is BIOS-level and the documented impact includes potential compromise of confidentiality, integrity, and availability. No...
CVE-2023-25494
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-5912
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-5912
A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-5912
CVE-2023-5912 appears in multiple sources tied to Lenovo Notebook firmware. The connected PT-2024-2539 entry attributes the issue to System Management Mode (SMM) handling in Lenovo firmware, with insufficient input validation that could allow a local attacker with elevated privileges to write to ...
Exploit for Classic Buffer Overflow in Dlink Dcs-932L_Firmware
Make Emulating Easy Again !ChatGPT Image Apr 22, 2025, 1256...
