VULNERABILITY INTELLIGENCE

CVE-2021-26316

CVSS score7.8 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2023-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.

Weakness classification

  • nvd@nist.gov: CWE-20
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-20

Primary references