CVE-2025-62862Medium· 4.6▾ SunlitAmpere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM Boot Error Record Table driver that could result in (1) an out-of…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM Boot Error Record Table driver that could result in (1) an out-of-bounds read which leaks Secure-EL0 information to a process running in Non-Secure state or (2) an out-of-bounds write which corrupts Secure or Non-Secure memory, limited to memory mapped to UEFI-MM Secure Partition by the Secure Partition Manager.
ampereone_a192-32m_firmware < 5.4.5.1ampereone_a192-26m_firmware < 5.4.5.1ampereone_a160-28m_firmware < 5.4.5.1ampereone_a144-33m_firmware < 5.4.5.1ampereone_a144-26m_firmware < 5.4.5.1ampereone_a96-36m_firmware < 5.4.5.1ampereone_a96-36x_firmware < 4.4.5.2ampereone_a128-34x_firmware < 4.4.5.2ampereone_a144-24x_firmware < 4.4.5.2ampereone_a144-27x_firmware < 4.4.5.2ampereone_a160-28x_firmware < 4.4.5.2ampereone_a192-26x_firmware < 4.4.5.2ampereone_a192-26x_firmware < 3.5.9.3ampereone_a192-32x_firmware < 3.5.9.3Upgrade past the affected range:
ampereone_a192-32m_firmware 5.4.5.1ampereone_a192-26m_firmware 5.4.5.1ampereone_a160-28m_firmware 5.4.5.1ampereone_a144-33m_firmware 5.4.5.1ampereone_a144-26m_firmware 5.4.5.1ampereone_a96-36m_firmware 5.4.5.1ampereone_a96-36x_firmware 4.4.5.2ampereone_a128-34x_firmware 4.4.5.2ampereone_a144-24x_firmware 4.4.5.2ampereone_a144-27x_firmware 4.4.5.2ampereone_a160-28x_firmware 4.4.5.2ampereone_a192-26x_firmware 3.5.9.3ampereone_a192-32x_firmware 3.5.9.3Connected by shared product, vendor, weakness, or advisory.
CVE-2025-62864Critical· 9.8Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an out-of-bounds write…
CVE-2025-62863Critical· 9.8Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PC…
CVE-2021-4034High· 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility
CVE-2024-9143Medium· 4.3Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an applicat…
CVE-2022-35260Medium· 6.5curl can be told to parse a `.netrc` file for credentials
CVE-2022-1304High· 7.8An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5