CVE-2022-29264 - An issue was discovered in coreboot 4.13 through 4.16 · CoreCVE

Back Back to CVE browser

CRITICAL

An issue was discovered in coreboot 4.13 through 4.16

Published Apr 25, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.88%

Description

An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33608
Advisory
https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7
x_refsource_MISCPatchThird Party Advisory
https://review.coreboot.org/c/coreboot/+/63478
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33608		Advisory
https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7		x_refsource_MISCPatchThird Party Advisory
https://review.coreboot.org/c/coreboot/+/63478		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 25, 2022

Updated Aug 3, 2024

Reserved Apr 14, 2022

Link CVE-2022-29264

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2022-29264

Severity n/a

Public date n/a

Links CVE-2022-29264

Assigner mitre

Published Apr 25, 2022

Updated Aug 3, 2024

Exploited since n/a

Link EUVD-2022-33608

EUVD-2022-33608