CVE-2024-33656 in AptioV

Résumé

par MITRE • 21/08/2024

The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: AMI
• Réserver: 25/04/2024
• Divulgation: 21/08/2024
• Modérer: accepté
• Entrée: VDB-275442
• CPE: prêt
• CWE: CWE-269 (confirmé)
• CVSS: 7.8 (CNA)
• EPSS: 0.00162
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-33656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-33656
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-33656/