CVE-2022-29277

Published: Nov 15, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060

Affected (41)

Products: Amd: Genoa Firmware, Hygon 1 Firmware, Hygon 2 Firmware, Hygon 3 Firmware, Milan Firmware, Rome Firmware, Ryzen 5300g Firmware, Ryzen 5300ge Firmware, Ryzen 5600g Firmware, Ryzen 5600ge Firmware, Ryzen 5600x Firmware, Ryzen 5700g Firmware, Ryzen 5700ge Firmware, Ryzen 5800x Firmware, Ryzen 5800x3d Firmware, Ryzen 5900x Firmware, Ryzen 5950x Firmware, Snowy Owl R1000 Firmware, Snowy Owl R2000 Firmware, Snowy Owl V2000 Firmware, Snowy Owl V3000 Firmware · Intel: Alder Lake Firmware, Bakerville Firmware, Cedar Island Firmware, Idaville Firmware, Comet Lake S Firmware, Tiger Lake H/up3 Firmware, Whiskey Lake Firmware, Denverton Firmware, Eagle Stream Firmware, Grangeville De Ns Firmware, Granville De Firmware, Greenlow Firmware, Greenlow R Firmware, Mehlow Firmware, Mehlow R Firmware, Tatlow Firmware, Purley R Firmware, Whitley Firmware

21 products

Ryzen 5300ge Firmware

Ryzen 5600g Firmware

Ryzen 5600ge Firmware

Ryzen 5600x Firmware

Ryzen 5700g Firmware

Ryzen 5700ge Firmware

Ryzen 5800x Firmware

Ryzen 5800x3d Firmware

Ryzen 5900x Firmware

Ryzen 5950x Firmware

Snowy Owl R1000 Firmware

Snowy Owl R2000 Firmware

Snowy Owl V2000 Firmware

Snowy Owl V3000 Firmware

Intel

18 products

Alder Lake Firmware

Bakerville Firmware

Cedar Island Firmware

Idaville Firmware

Comet Lake S Firmware

Tiger Lake H/up3 Firmware

Whiskey Lake Firmware

Denverton Firmware

Eagle Stream Firmware

Grangeville De Ns Firmware

Granville De Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Genoa Firmware	Before 05.52.25.0006

Running on/with	Platform Versions
Amd Genoa	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Hygon 1 Firmware	Before 05.36.26.0016

Running on/with	Platform Versions
Amd Hygon 1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Hygon 2 Firmware	Before 05.36.26.0016

Running on/with	Platform Versions
Amd Hygon 2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Hygon 3 Firmware	Before 05.44.26.0007

Running on/with	Platform Versions
Amd Hygon 3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Milan Firmware	Before 05.36.10.0017

Running on/with	Platform Versions
Amd Milan	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Milan Firmware	Before 05.36.26.0016

Running on/with	Platform Versions
Amd Milan	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Rome Firmware	Before 05.36.10.0017

Running on/with	Platform Versions
Amd Rome	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Rome Firmware	Before 05.36.26.0016

Running on/with	Platform Versions
Amd Rome	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5300g Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5300g	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5300ge Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5300ge	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5600g Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5600g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5600ge Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5600ge	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5600x Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5600x	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5700g Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5700g	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5700ge Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5700ge	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5800x Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5800x	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5800x3d Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5800x3d	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5900x Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5900x	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5950x Firmware	Before 05.44.30.0004

Running on/with	Platform Versions
Amd Ryzen 5950x	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Snowy Owl R1000 Firmware	Before 05.32.50.0018

Running on/with	Platform Versions
Amd Snowy Owl R1000	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Snowy Owl R2000 Firmware	Before 05.44.30.0005

Running on/with	Platform Versions
Amd Snowy Owl R2000	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Snowy Owl V2000 Firmware	Before 05.44.30.0007

Running on/with	Platform Versions
Amd Snowy Owl V2000	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Snowy Owl V3000 Firmware	Before 05.44.30.0007

Running on/with	Platform Versions
Amd Snowy Owl V3000	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Alder Lake Firmware	Before 05.44.23.0047

Running on/with	Platform Versions
Intel Alder Lake	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Bakerville Firmware	Before 05.21.51.0026

Running on/with	Platform Versions
Intel Bakerville	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Cedar Island Firmware	Before 05.42.11.0021

Running on/with	Platform Versions
Intel Cedar Island	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Idaville Firmware	Before 05.43.12.0052

Running on/with	Platform Versions
Intel Idaville	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Comet Lake S Firmware	Before 05.43.12.0052

Running on/with	Platform Versions
Intel Comet Lake S	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Tiger Lake H/up3 Firmware	Before 05.43.12.0052

Running on/with	Platform Versions
Intel Tiger Lake H/up3	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Whiskey Lake Firmware	Before 05.43.12.0052

Running on/with	Platform Versions
Intel Whiskey Lake	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Denverton Firmware	Before 05.10.12.0042

Running on/with	Platform Versions
Intel Denverton	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Eagle Stream Firmware	Before 05.44.25.0052

Running on/with	Platform Versions
Intel Eagle Stream	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Grangeville De Ns Firmware	Before 05.27.26.0023

Running on/with	Platform Versions
Intel Grangeville De Ns	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Granville De Firmware	Before 05.05.15.0038

Running on/with	Platform Versions
Intel Granville De	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Greenlow Firmware	Before 05.10.12.0042

Running on/with	Platform Versions
Intel Greenlow	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Greenlow R Firmware	Before 05.10.12.0042

Running on/with	Platform Versions
Intel Greenlow R	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Mehlow Firmware	Before 05.10.12.0042

Running on/with	Platform Versions
Intel Mehlow	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Mehlow R Firmware	Before 05.10.12.0042

Running on/with	Platform Versions
Intel Mehlow R	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Tatlow Firmware	Before 05.10.12.0042

Running on/with	Platform Versions
Intel Tatlow	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Purley R Firmware	Before 05.21.51.0048

Running on/with	Platform Versions
Intel Purley R	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Whitley Firmware	Before 05.42.23.0066

Running on/with	Platform Versions
Intel Whitley	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://www.insyde.com/security-pledge

Source: cve@mitre.org

Vendor Advisory

https://www.insyde.com/security-pledge/SA-2022060

Source: cve@mitre.org

Vendor Advisory

https://www.insyde.com/security-pledge

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.insyde.com/security-pledge/SA-2022060

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.