CWE-1274

CVEs per yearBy the year they were published

1. 20232
2. 20254
3. 20263

Newest CVEs

• CVE-2024-36345

  Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read,…

  AMD · AMD EPYC™ 4004

  Medium4.6
• CVE-2025-29950

  Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

  AMD · AMD EPYC™ 9004 Series Processors

  High7.1
• CVE-2025-65396

  A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot…

  Product not named

  Medium6.1
• CVE-2025-59694

  The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)),…

  Product not named

  Medium6.8
• CVE-2025-59404

  Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked. This permits bypass of Android Verified Boot (AVB) and…

  Product not named

  High7.5
• CVE-2025-4043

  Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

  Milesight · UG65-868M-EA

  Medium6.1
• CVE-2023-31345

  Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

  AMD · AMD EPYC™ 7003 Processors

  High7.5
• CVE-2022-2484

  The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could…

  Nokia · ASIK AirScale

  High8.4
• CVE-2022-2482

  A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file…

  Nokia · ASIK AirScale

  High8.4

Vendors it comes up for most

1. AMD3
2. Nokia2
3. Milesight1