deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20785
Published: 2023-08-07
Description: In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20786
Published: 2023-08-07
Description: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20787
Published: 2023-08-07
Description: In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648734; Issue ID: ALPS07648734.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-416
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20788
Published: 2023-08-07
Description: In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648734; Issue ID: ALPS07648735.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-416
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20789
Published: 2023-08-07
Description: In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07693193; Issue ID: ALPS07693193.
CVSS Score: 4.4 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20790
Published: 2023-08-07
Description: In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20793
Published: 2023-08-07
Description: In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20795
Published: 2023-08-07
Description: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07864900; Issue ID: ALPS07864900.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20796
Published: 2023-08-07
Description: In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20797
Published: 2023-08-07
Description: In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20798
Published: 2023-08-07
Description: In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-131
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20800
Published: 2023-08-07
Description: In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420955.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20801
Published: 2023-08-07
Description: In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420968.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20802
Published: 2023-08-07
Description: In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420976.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20803
Published: 2023-08-07
Description: In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326374.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20804
Published: 2023-08-07
Description: In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326384.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20805
Published: 2023-08-07
Description: In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326411.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20806
Published: 2023-08-07
Description: In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07537437.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20807
Published: 2023-08-07
Description: In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608433; Issue ID: ALPS07608433.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20808
Published: 2023-08-07
Description: In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03645895; Issue ID: DTV03645895.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20809
Published: 2023-08-07
Description: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20810
Published: 2023-08-07
Description: In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.
CVSS Score: 4.4 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20811
Published: 2023-08-07
Description: In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20812
Published: 2023-08-07
Description: In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20813
Published: 2023-08-07
Description: In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20814
Published: 2023-08-07
Description: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453560; Issue ID: ALPS07453560.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20815
Published: 2023-08-07
Description: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453587; Issue ID: ALPS07453587.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20816
Published: 2023-08-07
Description: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453589; Issue ID: ALPS07453589.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20817
Published: 2023-08-07
Description: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453600; Issue ID: ALPS07453600.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-20818
Published: 2023-08-07
Description: In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/August-2023; https://corp.mediatek.com/product-security-bulletin/August-2023
CVE: CVE-2023-39903
Published: 2023-08-07
Description: An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in this specific case at /var/log/fujitsu/ServerViewSuite/ism/FirmwareManagement/FirmwareManagement.log) allows insecure collection and storage of authorization credentials in cleartext. That occurs when users perform any ISM Firmware Repository Address setup test (Test the Connection), or regularly authorize against an already configured remote firmware repository site, as set up in ISM Firmware Repository Address. A privileged attacker is therefore able to potentially gather the associated ismsnap maintenance data, in the same manner as a trusted party allowed to export ismsnap data from ISM. The preconditions for an ISM installation to be generally vulnerable are that the Download Firmware (Firmware Repository Server) function is enabled and configured, and that the character \ (backslash) is used in a user credential (i.e., user/ID or password) of the remote proxy host / firmware repository server. NOTE: this may overlap CVE-2023-39379.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-312
References: https://security.ts.fujitsu.com/IndexDownload.asp?SoftwareGuid=a0131919-6d84-43b4-800e-d7f78200a70f; https://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-ISS-IS-2023-071410-Security-Notice.pdf; https://security.ts.fujitsu.com/IndexDownload.asp?SoftwareGuid=a0131919-6d84-43b4-800e-d7f78200a70f
CVE: CVE-2023-0425
Published: 2023-08-07
Description: 
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves
the reported vulnerabilities in the product versions under maintenance.
An attacker who successfully exploited one or more of these vulnerabilities could cause the product to
stop or make the product inaccessible. 

Numeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects:

Freelance controllers AC 700F: 

from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1; 

Freelance controllers AC 900F: 

Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.


CVSS Score: 8.6 (HIGH)
CWE: CWE-839
References: https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.68[PII_REDACTED]23[PII_REDACTED][PII_REDACTED][PII_REDACTED]590; https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.68[PII_REDACTED]23[PII_REDACTED][PII_REDACTED][PII_REDACTED]590
CVE: CVE-2023-0426
Published: 2023-08-07
Description: 
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves
the reported vulnerabilities in the product versions under maintenance.
An attacker who successfully exploited one or more of these vulnerabilities could cause the product to
stop or make the product inaccessible. 



Stack-based Buffer Overflow vulnerability in ABB Freelance controllers AC 700F (conroller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects:

 Freelance controllers AC 700F: 

from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019 , through Freelance 2019 SP1, through Freelance 2019 SP1 FP1; 




Freelance controllers AC 900F: 

through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.


CVSS Score: 8.6 (HIGH)
CWE: CWE-121
References: https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.68[PII_REDACTED]23[PII_REDACTED][PII_REDACTED][PII_REDACTED]590; https://search.abb.com/library/Download.aspx?DocumentID=7PAA007517&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.68[PII_REDACTED]23[PII_REDACTED][PII_REDACTED][PII_REDACTED]590
CVE: CVE-2023-32090
Published: 2023-08-07
Description: Pega platform clients who are using versions 6.1 through 7.3.1 may be
utilizing default credentials




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1393, CWE-287
References: https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-c23-vulnerability-default-operators; https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-c23-vulnerability-default-operators
CVE: CVE-2023-38392
Published: 2023-08-07
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/custom-field-template/wordpress-custom-field-template-plugin-2-5-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/custom-field-template/wordpress-custom-field-template-plugin-2-5-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-3896
Published: 2023-08-07
Description: Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3
CVSS Score: 7.8 (HIGH)
CWE: CWE-369, CWE-369
References: https://github.com/vim/vim/issues/12528; https://github.com/vim/vim/pull/12540; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-38795
Published: 2023-08-07
Description: In Gitea through 1.17.1, repo cloning can occur in the migration function.
CVSS Score: 6.5 (MEDIUM)
References: https://blog.gitea.com/release-of-1.17.2/; https://github.com/go-gitea/gitea/pull/20869; https://github.com/go-gitea/gitea/pull/20892
CVE: CVE-2023-36220
Published: 2023-08-07
Description: Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/172967/Textpattern-CMS-4.8.8-Command-Injection.html; https://release-demo.textpattern.co/; https://textpattern.com/
CVE: CVE-2023-4147
Published: 2023-08-07
Description: A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/errata/RHSA-2023:5069; https://access.redhat.com/errata/RHSA-2023:5091; https://access.redhat.com/errata/RHSA-2023:5093
CVE: CVE-2023-4194
Published: 2023-08-07
Description: A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-843, CWE-843, CWE-863
References: https://access.redhat.com/errata/RHSA-2023:6583; https://access.redhat.com/security/cve/CVE-2023-4194; https://bugzilla.redhat.com/show_bug.cgi?id=2229498
CVE: CVE-2023-4205
Published: 2023-08-07
Description: Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel.
CVE: CVE-2021-24916
Published: 2023-08-07
Description: The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses via the qubely_send_form_data AJAX action.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/93b893be-59ad-4500-8edb-9fa7a45304d5; https://wpscan.com/vulnerability/93b893be-59ad-4500-8edb-9fa7a45304d5
CVE: CVE-2023-0604
Published: 2023-08-07
Description: The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/4492b5ad-c339-47f5-9003-a9c5f23efdd9; https://wpscan.com/vulnerability/4492b5ad-c339-47f5-9003-a9c5f23efdd9
CVE: CVE-2023-27373
Published: 2023-08-07
Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.insyde.com/security-pledge/SA-2023035; https://www.insyde.com/security-pledge/SA-2023035