Lucene search

K
cvelistMitreCVELIST:CVE-2022-29275
HistoryNov 15, 2022 - 12:00 a.m.

CVE-2022-29275

2022-11-1500:00:00
mitre
www.cve.org
usbcoredxe
untrusted input
memory tampering
privileges escalation
insyde
kernel 5.0
kernel 5.1
kernel 5.2
kernel 5.3
kernel 5.4
kernel 5.5

8.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to escalation of privileges. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.21 Kernel 5.1: version 05.17.21 Kernel 5.2: version 05.27.21 Kernel 5.3: version 05.36.21 Kernel 5.4: version 05.44.21 Kernel 5.5: version 05.52.21 https://www.insyde.com/security-pledge/SA-2022058

8.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Related for CVELIST:CVE-2022-29275