VULNERABILITY INTELLIGENCE

CVE-2023-31345

CVSS score7.5 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2025-02-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.