High severity7.8NVD Advisory· Published Oct 1, 2021· Updated Jun 17, 2026
CVE-2021-33626
CVE-2021-33626
Description
A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- SMM/SMMdescription
Patches
Vulnerability mechanics
References
5- cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfnvdThird Party Advisory
- security.netapp.com/advisory/ntap-20220216-0006/nvdThird Party Advisory
- www.insyde.com/security-pledgenvdVendor Advisory
- www.insyde.com/security-pledge/SA-2021001nvdVendor Advisory
- www.kb.cert.org/vuls/id/796611nvd
News mentions
0No linked articles in our index yet.