{"id":"CVE-2022-29264","details":"An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.","modified":"2026-08-12T13:01:06.789176Z","published":"2022-04-25T06:11:03Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29264.json"},"references":[{"type":"WEB","url":"https://review.coreboot.org/c/coreboot/+/63478"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29264.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29264"},{"type":"FIX","url":"https://github.com/coreboot/coreboot/commit/afb7a814783cda12f5b72167163b9109ee1d15a7"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/coreboot/coreboot","events":[{"introduced":"5c186c6777c9438ff4681929c9c25c98dee28bef"},{"fixed":"e3e965b13d4806b47aca23a256823efe4319ef5f"}],"database_specific":{"extracted_events":[{"introduced":"4.13"},{"fixed":"4.16"}],"source":"DESCRIPTION"}}],"versions":["4.15","4.14","4.13"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29264.json","vanir_signatures_modified":"2026-08-12T13:01:06Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/elogtool.c","function":"elog_read"},"deprecated":false,"digest":{"function_hash":"240813019727192258668991821742915240813","length":759},"id":"CVE-2022-29264-159fa92b","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/uflashrom.h"},"deprecated":false,"digest":{"line_hashes":["301981727892992719405756318313456242767","163199068153506204233695466220560018779","148966854464601126665569674090171781194","122797736278667767811623552485292833013","157337035890348657264741287755152097215","202243568550352899173341935229038528084"],"threshold":0.9},"id":"CVE-2022-29264-24cc0429"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/uflashrom.c","function":"resize_buf_from_offset"},"deprecated":false,"digest":{"function_hash":"77946186802525478101505576961975874941","length":267},"id":"CVE-2022-29264-48ab9788"},{"id":"CVE-2022-29264-4971302d","signature_type":"Line","signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/uflashrom.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["239064598579763024817126971105822120845","67170796761367928198569335893558168973","30683593049851012266355848978807254094","266620188682374608229473720857380463370","222563245450047457065567484124314510457","141613212597926717069591464692788321441","87879633273133971216518429201238856420","312075409985391701327395456962155746156","196541430687511726068641946285579458592","24088862192574014742171268567551073726","17913487556105530959315874630453706554","96826793280264622518991926712687639260","261424042489009894037948927307423715081","135921696568394568533568332253895575172","183593692817962736589065929862461713083","119201880364931792683583787359495735406","70885913664743578596108042484404833377","117567268943489628549989798102837903153","304615432919440664910363254976351325652","175039799225952061394301916795119414864","9164873967501685441100046852777956733","260267634394026334740084907405795030247","89126376030452151340087190061605529438","238827850420374153251225705192584992229","123380078980211097010989390054635033293","207949273569315245903996672271596858431","30692814821373938301284527802904459518","157623734549085093554628354935728027415","80571607852949007222907193132844812658","94700148316411390180940585494289763155","137139956904627285699754251498121708019","75234465908461971347875397892226488995","151847995080503296866291109555067531928","307693109594814153492822563617551934220","260867530429461446880455170670298267037","110025088277588371945867671191199809627","300521720375726433033130292136880837881","149134190884716840795002858686751854721","119976619961947836716555256545109753717","232649458595634778538268532519143075309","122381251832255629853192323726161883634","186653073680416821577511799795471665222","62962390848836413858032155096817664269","178365705590117384517881550218584515863","271641111376205295398618493978287887472","13229693374576091306512388128808595909","292444631660783714394212918075293370791","332633340601978589910411499997160244303","316240814202189920956050168783089659623","107786402879744953414630542374435662097","120178698569752013002975657952193557374","38078302051029770209306246849704239867","90414111946745831873477848376787838743","68291822277756625757599241119987700575","55154235142047608154157866601850218414","281368487984541784396035252231805547678","270526604144706844353239820563184372064","181154815808748152116684986942594523842","333142977509198507031092390194383357177","97439393247579069585721331588632056023","2882487777715129282591859439389015714","46786494835915191644523919831876428632","5584864077190787034256113063500115499","149673408247228189834867017626174693664","62213166723648443446908508494834563542","126970316274763494412338878034246610744","314134193146152291151095765898833252106","33487450812861855684977699837074982214","156177296855409204917494109627340021224","28935205006660275524540610779865485767","210553129733421388888414539356503469635","136763949954476928575193798721511549780","203798847908776876964829061812327938808","95417632177334447151188236512795079719","235992272343114640697301539939737145564","320047529741227595462410622517132115570","249915097149745523870856620504458076714","179551704246789523175837604993914912979","209076635447727799552043523678434777791","327558368727730245274262788136893685571","129789822044065685688424156220198391495","210567753389724015075532642445593969242","195981249470264844520643222457211699256","89143415756118806730004199190130416546","170696594353541540294725804515530718576","193849648166852972860811747288135427979","199744812217048606887026979710389871664","232649458595634778538268532519143075309","122381251832255629853192323726161883634","186653073680416821577511799795471665222","62962390848836413858032155096817664269","178365705590117384517881550218584515863","271641111376205295398618493978287887472","13229693374576091306512388128808595909","292444631660783714394212918075293370791","332633340601978589910411499997160244303","123780154314172493401414100396852824699","122245101710888470379117356966228667869","333048235449635902221708038097380128190","318533609585230031795971595891864129658","238981367575021852782165931053409947674","166707398427769907537766798353323582128","188219316014597956536405465826162656551","22966698096162465346735028083035382907","213712878911022100864952438834957851972","68356513996444214462827395638260430677","282098257643052793293442592720231267823","99969262627178555413995119015650215960","102766077171060707805828406151081981156","220561150180519936298776168841591234473","139364715521761638750142152665261754288","333290183843305184157621713104496915125","1044860168844786228688942864646022012","202401051988920923009281794425912992445","69577295359173288074920166561680559568","181154815808748152116684986942594523842","333142977509198507031092390194383357177","97439393247579069585721331588632056023","2882487777715129282591859439389015714","46786494835915191644523919831876428632","302932908810281266684949357551950907423","324342731855540724267686859443608453607","282984289462248060320026477756609061211","2447715258558974450879879599388447666","136387683768962387268113313970663666133","160683355006513282358308892891996940962","141806766193677670326015300354183560104","306596355433532543123285991897212601822","24885712570596510417739298728305824003","236932941596405009065404670071160849265","319681721852100737046271375282767246291","121826377289666087129892752976237965138","303698084412134240372371609519648896817","317009935507031825219565295781081359039","81424060644777247234754501177913453582","6517448614159410076656127733701692208","115910756977760573976440091399440040417","25593310722106572772727855031512788885","42877661216537199086809018588488729451","142611307163728189033314304069218076782","88051337828325046975958513698221555898","235992272343114640697301539939737145564","320047529741227595462410622517132115570","249915097149745523870856620504458076714","179551704246789523175837604993914912979","209076635447727799552043523678434777791"]}},{"source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/elogtool.c"},"deprecated":false,"digest":{"line_hashes":["279189367702143789681182215173042461476","94732300597935061671957618582521713431","171503374722021335751877014014698551987","59174758725309461934303640883461508352","83106950441693641449962670197356168925","67973776578048049563590073594667394166","98763381145482265656554974397431206791","81831037360707149074067457409564425313","62650898915098881323724157776892484128","228626492276985917148316241906359894782","202755491778892702909815888779513372592","295887867936885947786567203687902593801","262243918910150872234785864171366255673","293838696584317287197614035764227623649","72283167448505667804360585272060587545","141427972621761332405798168353142262736","317628609082400781720866955107457959474","261758792514858543914440319552461122019","20114936486380303831626566994430598701","191211653689608281849725861465940693588","200731587697031086931960662395795497402","224765327108266316018883658620160424847","328408700553625157264751302803493605454","140055541931951244239966361091469176594","220158750355067835354135636307144563887","272228596850850421563242509744730982617","330147430105267535648001791680042668094","331662878721082377706803989485246722756","244377908888495754727565097057070870232","263798343059714543252752905270033538423"],"threshold":0.9},"id":"CVE-2022-29264-6d05536b","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/uflashrom.c","function":"flashrom_write"},"deprecated":false,"digest":{"function_hash":"330200252253322802044488856142790882251","length":1599},"id":"CVE-2022-29264-a2cf577b","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/uflashrom.c","function":"flashrom_read"},"deprecated":false,"digest":{"function_hash":"264431064377102917418938184721565619654","length":1110},"id":"CVE-2022-29264-b5289372","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"269838656149847548271508505518730551427","length":235},"id":"CVE-2022-29264-c13eae8c","signature_type":"Function","signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"function":"flashrom_print_cb","file":"util/cbfstool/uflashrom.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"123559663553296414600914463801511411249","length":589},"id":"CVE-2022-29264-c4d308f3","signature_type":"Function","signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"function":"elog_write","file":"util/cbfstool/elogtool.c"}},{"id":"CVE-2022-29264-e88d32cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f","target":{"file":"util/cbfstool/uflashrom.c","function":"resize_buf_to_offset"},"deprecated":false,"digest":{"function_hash":"77726855898205296226683643512483813339","length":233}}]}}],"schema_version":"1.9.0"}