Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gqmx-7hj9-m7jj

Опубликовано: 15 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by

EPSS

Процентиль: 26%
0.00091
Низкий

7.8 High

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 7.8
nvd
около 3 лет назад

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by

EPSS

Процентиль: 26%
0.00091
Низкий

7.8 High

CVSS3

Дефекты

CWE-367