34 matches found
EUVD-2022-37374
Malicious code in bioql PyPI...
EUVD-2022-28749
Malicious code in bioql PyPI...
CVE-2023-47252
An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could...
CVE-2023-47252
An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could...
CVE-2023-47252: Out-of-bounds Write
An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could...
PT-2024-13431 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.0 through 5.6 Description: An issue was discovered in PnpSmm, where there is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not...
CVE-2023-47252
An out-of-bounds access vulnerability exists in the PnpSmm component of Insyde InsydeH2O (kernel versions 5.0 through 5.6). The root cause is that PNP-related SMI sub-functions fail to verify data size before retrieving it from the SMM communication buffer . This flaw can lead to tampering, where...
Dell PowerEdge Server BIOS Input Validation Error Vulnerability
Dell PowerEdge Server BIOS is a system update driver for the Dell Dell of the United States. The Dell PowerEdge Server BIOS is vulnerable to an input validation error vulnerability that stems from the presence of an SMM communication buffer validation error. An attacker could exploit this...
CVE-2024-25942: Improper Input Validation
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...
CVE-2024-0161: Improper Input Validation
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...
CVE-2024-0162: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...
CVE-2022-23820: Improper Input Validation
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution...
CVE-2022-34416
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...
CVE-2022-34421
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...
PT-2023-13392
Name of the Vulnerable Software and Affected Versions Dell PowerEdge BIOS affected versions not specified Dell Precision BIOS affected versions not specified Description The issue is related to an Improper SMM communication buffer verification vulnerability. A local malicious user with high...
CVE-2022-34414: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...
CVE-2022-34418: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...
CVE-2022-34416: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...
CVE-2022-34406: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...
CVE-2022-34415: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...