CVE-2022-40250 — Vulnetix

CVE-2022-40250 PUBLISHED

BRLY-2022-016 High CVE-2022-33209, CVE-2022-40250 Binarly REsearch Team has discovered stack overflow vulnerability in SMI handler on Intel platforms allowing a possible attacker to execute arbitrary code in SMM.

EPSS 0.09% · 25.6th percentile

Risk Scores

EPSS Score

0.09%

25.6th percentile

Exploit Intelligence

https://www.binarly.io/advisories/BRLY-2022-016 (nist-nvd)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html (circl)
https://www.ami.com/security-center/ (circl)

Timeline

Sep 20, 2022 CVE Published
Sep 21, 2022 EPSS Score
Nov 5, 2022 EPSS Score
Dec 19, 2022 EPSS Score
Feb 2, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 19, 2023 EPSS Score
May 3, 2023 EPSS Score
Jun 16, 2023 EPSS Score
Jul 31, 2023 EPSS Score
Sep 14, 2023 EPSS Score
Oct 29, 2023 EPSS Score

References

[BRLY-2022-016] Stack overflow vulnerability in SMI handler. advisory

Open in Interactive Console →