CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

EUVD-2026-66834

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of the ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption by sending a crafted software SMI (SW SMI) request with an oversized length value. The CVSS 4.0 score is 6.8 (Medium) , reflecting ...

CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

CVE-2023-43578

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2022-42277

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...

EUVD-2023-47984

Malicious code in bioql PyPI...

CVE-2023-43578

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43578

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

Buffer overflow

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43578

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43578

The CVE-2023-43578 entry reports a buffer overflow in Lenovo Desktop SmiFlash module that could allow a local user with elevated privileges to execute arbitrary code. Affected: Lenovo Desktop products (SmiFlash component). Root cause: buffer overflow vulnerability. Impact: local code execution wi...

Lenovo Desktops Security Breach

Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that originates from a buffer overflow in the SmiFlash module...

PT-2023-28866 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the SmiFlash module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment, the...

CVE-2022-42276

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...

CVE-2022-42277

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...

CVE-2022-42277

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...

CVE-2022-42277

The CVE-2022-42277 entry affects NVIDIA DGX Station. A vulnerability in SBIOS (SmiFlash) permits a local, highly privileged user to read, write, and erase the flash, with potential for code execution, privilege escalation, denial of service, and information disclosure; impact could extend to othe...

PT-2023-14077 · Nvidia · Nvidia Dgx A100

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 affected versions not specified Description: The issue is related to a vulnerability in SBIOS in the SmiFlash component, allowing a local user with elevated privileges to read, write, and erase flash. This may lead to code...