CVE-2022-29279: Buffer Overflow
Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice. This issue was discovered by Insyde during security review. It was fixed in: Kernel 5.0: version 05.09.17 Kernel 5.1: version 05.17.17 Kernel 5.2: version 05.27.17 Kernel 5.3: version 05.36.17 Kernel 5.4: version 05.44.17 Kernel 5.5: version 05.52.17 https://www.insyde.com/security-pledge/SA-2022062
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-29279?
CVE-2022-29279 is a vulnerability that allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice.
How can this vulnerability be exploited?
This vulnerability can be exploited by using an untrusted pointer to tamper with SMRAM and OS memory in SdHostDriver and SdMmcDevice.
What is the severity of CVE-2022-29279?
The severity of CVE-2022-29279 is high, with a CVSS score of 8.2.
Which software versions are affected by CVE-2022-29279?
Insyde Kernel versions 5.0 to 5.5 are affected by CVE-2022-29279.
Has this vulnerability been fixed?
Yes, this vulnerability has been fixed in Insyde Kernel versions 5.0.05.09.17 to 5.5.05.52.17.