CVE-2022-34325

7.8 highEPSS 0.1%

High (7.8) in insyde insydeh2o. EPSS 0.1% chance of exploitation in the next 30 days.

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2022-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

insyde:insydeh2o

References

https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2022057
https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2022057

Check your stack JSON