Threats tagged 'ghsa-35m5-23fr-x9rq'

This vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker with high privileges to control the RBX register, which influences pointers used in power and thermal configuration logic. Due to lack of validation on these buffers, an attacker can cause arbitrary corruption of SMRAM, potentially leading to System Management Mode (SMM) privilege escalation. The flaw has a high severity score of 8.2 and impacts confidentiality, integrity, and availability.