Advisories

[BRLY-2022-034] Stack memory leak vulnerability in DXE driver.

Binarly REsearch Team has discovered a stack memory leak vulnerability that allows a potential attacker to write stack memory to NVRAM variable.

[BRLY-2022-033] Stack buffer overflow vulnerability leading to arbitrary code execution during DXE phase.

Binarly REsearch Team has discovered a stack buffer overflow vulnerability that allows an attacker to execute arbitrary code.

[BRLY-2022-037] The stack memory leak vulnerability in DXE driver.

Binarly REsearch Team has discovered a stack memory leak vulnerability that allows a potencial attacker to write stack memory to NVRAM variable.

[BRLY-2022-030] The stack buffer overflow vulnerability leads to arbitrary code execution during DXE phase.

Binarly REsearch Team has discovered a stack buffer overflow vulnerability that allows an attacker to execute arbitrary code.

[BRLY-2022-036] The stack memory leak vulnerability in DXE driver.

Binarly REsearch Team has discovered a stack memory leak vulnerability that allows a potencial attacker to write stack memory to NVRAM variable.

[BRLY-2022-032] The stack memory leak vulnerability in DXE driver.

Binarly REsearch Team has discovered a stack memory leak vulnerability that allows a potencial attacker to write stack memory to NVRAM variable.

[BRLY-2022-035] Stack memory leak vulnerability in DXE driver.

Binarly REsearch Team has discovered a stack memory leak vulnerability that allows a potential attacker to write stack memory to NVRAM variable.

[BRLY-2023-021] The Denial Of Service (DoS) vulnerability during PEI phase in EDK2 codebase

The Binarly REsearch Team has identified a PEI-phase Denial of Service (DoS) vulnerability in the EDK2 codebase, which can be exploited by an attacker capable of modifying physical memory.

[BRLY-2022-001] Stack buffer overflow vulnerability leads to arbitrary code execution in a DXE driver on Intel platform.

Binarly REsearch Team has discovered a stack overflow vulnerability that allows a local root user to access a UEFI DXE driver and execute arbitrary code.

[BRLY-2022-017] SMM callout vulnerability in SMM driver (SMM arbitrary code execution).

Binarly REsearch Team identified an SMM callout, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2022-018] SMM memory leak vulnerability in SMM driver (SMRAM read).

Binarly REsearch Team identified an SMM memory leak vulnerability, which allows an attacker to read portions of SMRAM memory. This in turn could help building a successful attack vector exploiting SMM memory corruption vulnerability.

[BRLY-2022-024] SMM memory corruption vulnerability in SMM driver (SMRAM write).

Binarly REsearch Team identified an SMM memory corruption vulnerability allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-026] SMM memory corruption vulnerability in SMM driver (SMRAM write).

Binarly REsearch Team identified an SMM memory corruption vulnerability allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-025] SMM memory leak vulnerability in SMM driver (SMRAM read).

Binarly REsearch Team identified an SMM memory leak vulnerability, which allows an attacker to read portions of SMRAM memory. This in turn could help building a successful attack vector exploiting SMM memory corruption vulnerability.

[BRLY-2022-023] SMM memory corruption vulnerability in Software SMI handler

Binarly REsearch Team has discovered a SMM memory corruption vulnerability allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-022] SMM callout vulnerability in SMM driver (SMM arbitrary code execution).

Binarly REsearch Team identified a SMM callout, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2022-003] SMM memory corruption vulnerability in SMM driver on Intel platforms.

Binarly REsearch Team has discovered SMM memory corruption vulnerability on Intel platforms allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-009] The arbitrary write vulnerability leads to arbitrary code execution during PEI phase on Intel platform.

Binarly REsearch Team has discovered a arbitrary write vulnerability on Intel platforms allowing a possible attacker to execute arbitrary code during PEI phase.

[BRLY-2022-015] The arbitrary code execution in DXE driver.

Binarly REsearch Team has discovered the ability of arbitrary code execution in DXE driver.

[BRLY-2022-012] SMM memory corruption vulnerability in SMM driver on HP device (SMRAM write).

Binarly REsearch Team has discovered an SMM memory corruption vulnerability in an HP device allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-016] Stack overflow vulnerability in SMI handler.

Binarly REsearch Team has discovered stack overflow vulnerability in SMI handler on Intel platforms allowing a possible attacker to execute arbitrary code in SMM.

[BRLY-2022-013] SMM memory corruption vulnerability in SMM driver on HP device (SMRAM write).

Binarly REsearch Team has discovered an SMM memory corruption vulnerability in an HP device allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-011] SMM memory corruption vulnerability in SMM driver on HP device (SMRAM write).

Binarly REsearch Team has discovered an SMM memory corruption vulnerability in an HP device allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-014] Arbitrary write vulnerability in PEI module leads to arbitrary code execution during PEI phase.

Binarly REsearch Team has discovered a arbitrary write vulnerability in PEI module allowing a possible attacker to execute arbitrary code during PEI phase.

[BRLY-2022-027] The stack buffer overflow vulnerability leads to arbitrary code execution during PEI phase on Intel platform.

Binarly REsearch Team has discovered a stack buffer overflow vulnerability on Intel platforms allowing a possible attacker to execute arbitrary code during PEI phase.

[BRLY-2021-051] SMM memory corruption vulnerability in SMM driver on Intel platforms

Binarly REsearch Team has discovered SMM memory corruption vulnerability on Intel platforms allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-050] SMM memory corruption vulnerability in SMM driver on Intel platforms

Binarly REsearch Team has discovered SMM memory corruption vulnerability on Intel platforms allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-053] The stack buffer overflow vulnerability leads to arbitrary code execution in DXE driver on Intel platform

Binarly REsearch Team has discovered a stack overflow vulnerability that allows a local root user to access UEFI DXE driver and execute arbitrary code.

[BRLY-2021-014] SMM memory corruption vulnerability in SMM driver on Fujitsu device (SMRAM write).

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in Fujitsu devices allowing a possible attacker to write data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-028] Absence or incomplete applying the Return Stack Buffer (RSB) stuffing mitigation logic before resuming from SMM.

Binarly REsearch Team discovered that most enterprise vendors are affected by not correctly applying the Return Stack Buffer (RSB) stuffing mitigation logic before resuming from SMM (RSM instruction).

[BRLY-2021-043] SMM arbitrary code execution in USBRT SMM driver on Dell devices.

Binarly REsearch Team has discovered SMM arbitrary code execution on Dell devices.

[BRLY-2021-045] SMM callout vulnerability in USBRT SMM driver on Dell devices (SMM arbitrary code execution)

Binarly REsearch Team identified SMM callout on Dell platforms, which allows a attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2022-004] SMM arbitrary code execution in USBRT SMM driver on Dell devices.

Binarly REsearch Team has discovered SMM arbitrary code execution on Dell devices.

[BRLY-2021-033] SMM memory corruption vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on multiple HP devices allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-032] The heap buffer overflow vulnerability in child SW SMI handler on multiple HP devices.

Binarly REsearch Team has discovered a heap buffer overflow vulnerability in a child SW SMI handler on multiple HP devices that allows corruption of heap metadata.

[BRLY-2021-034] SMM memory corruption vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on multiple HP devices allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-036] SMM memory corruption vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on multiple HP devices allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-042] SMM memory corruption vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on multiple HP devices allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-041] SMM callout vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM callout vulnerability on multiple HP devices allowing a possible attacker to hijack execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-039] The heap buffer overflow vulnerability in child SW SMI handler on multiple HP devices.

Binarly REsearch Team has discovered a heap buffer overflow vulnerability in child SW SMI handler on multiple HP devices that allow corrupt heap metadata.

[BRLY-2021-040] SMM callout vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM callout vulnerability on multiple HP devices allowing a possible attacker to hijack execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-037] SMM memory corruption vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on multiple HP devices allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-038] The heap buffer overflow vulnerability in child SW SMI handler on multiple HP devices.

Binarly REsearch Team has discovered a heap buffer overflow vulnerability in the child SW SMI handler on multiple HP devices that allows heap data corruption.

[BRLY-2021-035] SMM memory corruption vulnerability in SMM driver on multiple HP devices.

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on multiple HP devices allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-047] SMM callout vulnerability in SMM driver on HP device (SMM arbitrary code execution).

Binarly REsearch Team identified SMM callout on HP device, which allows a attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-046] SMM callout vulnerability in SMM driver on HP device (SMM arbitrary code execution).

Binarly REsearch Team identified SMM callout on HP device, which allows a attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2022-010] SMM memory corruption vulnerability in SMM driver on HP device (SMRAM write

Binarly REsearch Team has discovered an SMM memory corruption vulnerability in an HP device allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-020] SMM callout vulnerability in combined DXE/SMM on Fujitsu device (SMM arbitrary code execution)

Binarly REsearch Team identified a SMM callout in a Fujitsu device, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-019] SMM callout vulnerability in combined DXE/SMM on Fujitsu device (SMM arbitrary code execution)

Binarly REsearch Team identified a SMM callout in a Fujitsu device, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-006] The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI DXE driver on multiple HP devices.

Binarly REsearch Team has discovered a stack overflow vulnerability that allows a local priviledged user to access UEFI DXE driver and execute arbitrary code.

[BRLY-2021-004] SMM callout vulnerability in SMM driver on multiple HP devices (SMM arbitrary code execution).

Binarly REsearch Team identified a SMM callout in multiple HP devices, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-005] The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI DXE driver on multiple HP devices.

Binarly REsearch Team has discovered a stack overflow vulnerability that allows a local priviledged user to access UEFI DXE driver and execute arbitrary code.

[BRLY-2021-003] The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI application on multiple HP devices.

Binarly REsearch Team has discovered a stack buffer overflow vulnerability that allows a local priviledged user to access UEFI Runtime DXE application and execute arbitrary code.

[BRLY-2021-007] The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI application on multiple HP devices.

Binarly REsearch Team has discovered a stack overflow vulnerability that allows a local root user to access UEFI Runtime DXE application and execute arbitrary code.

[BRLY-2021-018] SMM callout vulnerability in combined DXE/SMM on Fujitsu device (SMM arbitrary code execution)

Binarly REsearch Team identified a SMM callout in a Fujitsu device, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-017] SMM callout vulnerability in combined DXE/SMM on Fujitsu device (SMM arbitrary code execution)

Binarly REsearch Team identified a SMM callout in a Fujitsu device, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-016] SMM memory corruption vulnerability in combined DXE/SMM on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in a Fujitsu device allowing a possible attacker to write data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-008] SMM callout vulnerability in SMM driver on Fujitsu device (SMM arbitrary code execution).

Binarly REsearch Team identified a SMM callout in a Fujitsu device, which allows an attacker to access the System Management Mode and execute arbitrary code.

[BRLY-2021-010] SMM memory corruption vulnerability in combined DXE/SMM driver on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in a Fujitsu device allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-011] SMM memory corruption vulnerability in combined DXE/SMM driver on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in Fujitsu devices allowing a possible attacker to write data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-009] SMM memory corruption vulnerability in combined DXE/SMM driver on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in a Fujitsu device allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-012] SMM memory corruption vulnerability in combined DXE/SMM driver on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in Fujitsu devices allowing a possible attacker to write data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-024] SMM memory corruption vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on a BullSequana Edge server allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-021] The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI DXE driver on BullSequana Edge server.

Binarly REsearch Team has discovered a stack overflow vulnerability that allows a local priviledged user to access UEFI DXE driver and execute arbitrary code.

[BRLY-2021-023] SMM callout vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM callout vulnerability on a BullSequana Edge server allowing a possible attacker to hijack the execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-015] SMM memory corruption vulnerability in combined DXE/SMM on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in a Fujitsu device allowing a possible attacker to write data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-013] SMM memory corruption vulnerability in combined DXE/SMM driver on Fujitsu device (SMRAM write)

Binarly REsearch Team has discovered a SMM memory corruption vulnerability in Fujitsu devices allowing a possible attacker to write data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-022] SMM callout vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM callout vulnerability on a BullSequana Edge server allowing a possible attacker to hijack execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-031] SMM callout vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM callout vulnerability on a BullSequana Edge server allowing a possible attacker to hijack execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-028] SMM callout vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM callout vulnerability on a BullSequana Edge server allowing a possible attacker to hijack execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-025] SMM callout vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM callout vulnerability on a BullSequana Edge server allowing a possible attacker to hijack execution flow of a code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-029] SMM memory corruption vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on a BullSequana Edge server allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-026] SMM memory corruption vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on a BullSequana Edge server allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-027] SMM memory corruption vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on a BullSequana Edge server allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2021-030] SMM memory corruption vulnerability in combined DXE/SMM driver on BullSequana Edge server

Binarly REsearch Team has discovered a SMM memory corruption vulnerability on a BullSequana Edge server allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

[BRLY-2022-031] The stack memory leak vulnerability in DXE driver.

Binarly REsearch Team has discovered a stack memory leak vulnerability that allows a potencial attacker to write stack memory to NVRAM variable.

[BRLY-2021-002] Lenovo system firmware has missing coverage with Boot Guard protected ranges (IBB) for UEFI modules

Binarly REsearch Team identified several Lenovo devices do not properly protect UEFI system firmware modules with Intel Boot Guard technolody (missing protection coverage Boot Guard IBB hash), which allows an attacker with write access to the SPI flash storage (such as with physical access or leveraging a BIOS write protection bypass vulnerability) to install a persistent backdoor/implant.

[BRLY-2021-001] SMM callout vulnerability on Lenovo ThinkPad laptops firmware (SMM arbitrary code execution)

Binarly REsearch Team identified SMM callout in ThinkPad 13 2nd Gen, which allows a local privileged user to access the System Management Mode and execute arbitrary code.