CVE-2022-40250: high-severity vulnerability in AMI Aptio
Stack overflow vulnerability in SMI handler on SmmSmbiosElog.
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A stack overflow vulnerability in UEFI firmware allows an attacker to bypass security protections and run malicious code in System Management Mode (SMM), a highly privileged environment isolated from the operating system. This could enable installation of persistent firmware backdoors that survive OS reinstalls and bypass security features like Secure Boot.
Stack buffer overflow in the SmmSmbiosElog handler (CWE-121) enables privilege escalation from ring 0 to ring -2 execution context within SMM. An attacker exploiting this vulnerability can execute arbitrary code in SMM, bypass SPI flash protections, and install persistent firmware implants that circumvent UEFI security mechanisms including Secure Boot and memory isolation for hypervisors.
In the same product, most dangerous first.