Vulnerabilities > CVE-2022-21933 - Out-of-bounds Write vulnerability in Asus products

Summary

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-787 - Out-of-bounds Write

References