CVE-2022-29264

    Dashboard / Vulnerabilities / CVE-2022-29264

    CVE-2022-29264

    Published: 25 Apr 2022Last Modified: 12 Aug 2026

    Summary:

    Details: An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.

    References: https://review.coreboot.org/c/coreboot/+/63478, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29264.json, https://nvd.nist.gov/vuln/detail/CVE-2022-29264, https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 5c186c6777c9438ff4681929c9c25c98dee28bef
    Fixed -e3e965b13d4806b47aca23a256823efe4319ef5f

    Affected versions

    4.15

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-29264 | CVE-DB