CVE-2022-29264

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-29264
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29264.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-29264
Downstream
Published
2022-04-25T06:11:03Z
Modified
2026-08-12T13:01:06.789176Z
Summary
[none]
Details

An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29264.json"
}
References

Affected packages

Git / github.com/coreboot/coreboot

Affected ranges

Type
GIT
Repo
https://github.com/coreboot/coreboot
Events
Introduced
5c186c6777c9438ff4681929c9c25c98dee28bef
Fixed
e3e965b13d4806b47aca23a256823efe4319ef5f
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "4.13"
        },
        {
            "fixed": "4.16"
        }
    ],
    "source": "DESCRIPTION"
}

Affected versions

4.*
4.13
4.14
4.15

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29264.json"
vanir_signatures 
[
    {
        "target": {
            "function": "elog_read",
            "file": "util/cbfstool/elogtool.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-159fa92b",
        "signature_version": "v1",
        "digest": {
            "length": 759.0,
            "function_hash": "240813019727192258668991821742915240813"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "util/cbfstool/uflashrom.h"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-24cc0429",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "301981727892992719405756318313456242767",
                "163199068153506204233695466220560018779",
                "148966854464601126665569674090171781194",
                "122797736278667767811623552485292833013",
                "157337035890348657264741287755152097215",
                "202243568550352899173341935229038528084"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "resize_buf_from_offset",
            "file": "util/cbfstool/uflashrom.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-48ab9788",
        "signature_version": "v1",
        "digest": {
            "length": 267.0,
            "function_hash": "77946186802525478101505576961975874941"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "util/cbfstool/uflashrom.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-4971302d",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "239064598579763024817126971105822120845",
                "67170796761367928198569335893558168973",
                "30683593049851012266355848978807254094",
                "266620188682374608229473720857380463370",
                "222563245450047457065567484124314510457",
                "141613212597926717069591464692788321441",
                "87879633273133971216518429201238856420",
                "312075409985391701327395456962155746156",
                "196541430687511726068641946285579458592",
                "24088862192574014742171268567551073726",
                "17913487556105530959315874630453706554",
                "96826793280264622518991926712687639260",
                "261424042489009894037948927307423715081",
                "135921696568394568533568332253895575172",
                "183593692817962736589065929862461713083",
                "119201880364931792683583787359495735406",
                "70885913664743578596108042484404833377",
                "117567268943489628549989798102837903153",
                "304615432919440664910363254976351325652",
                "175039799225952061394301916795119414864",
                "9164873967501685441100046852777956733",
                "260267634394026334740084907405795030247",
                "89126376030452151340087190061605529438",
                "238827850420374153251225705192584992229",
                "123380078980211097010989390054635033293",
                "207949273569315245903996672271596858431",
                "30692814821373938301284527802904459518",
                "157623734549085093554628354935728027415",
                "80571607852949007222907193132844812658",
                "94700148316411390180940585494289763155",
                "137139956904627285699754251498121708019",
                "75234465908461971347875397892226488995",
                "151847995080503296866291109555067531928",
                "307693109594814153492822563617551934220",
                "260867530429461446880455170670298267037",
                "110025088277588371945867671191199809627",
                "300521720375726433033130292136880837881",
                "149134190884716840795002858686751854721",
                "119976619961947836716555256545109753717",
                "232649458595634778538268532519143075309",
                "122381251832255629853192323726161883634",
                "186653073680416821577511799795471665222",
                "62962390848836413858032155096817664269",
                "178365705590117384517881550218584515863",
                "271641111376205295398618493978287887472",
                "13229693374576091306512388128808595909",
                "292444631660783714394212918075293370791",
                "332633340601978589910411499997160244303",
                "316240814202189920956050168783089659623",
                "107786402879744953414630542374435662097",
                "120178698569752013002975657952193557374",
                "38078302051029770209306246849704239867",
                "90414111946745831873477848376787838743",
                "68291822277756625757599241119987700575",
                "55154235142047608154157866601850218414",
                "281368487984541784396035252231805547678",
                "270526604144706844353239820563184372064",
                "181154815808748152116684986942594523842",
                "333142977509198507031092390194383357177",
                "97439393247579069585721331588632056023",
                "2882487777715129282591859439389015714",
                "46786494835915191644523919831876428632",
                "5584864077190787034256113063500115499",
                "149673408247228189834867017626174693664",
                "62213166723648443446908508494834563542",
                "126970316274763494412338878034246610744",
                "314134193146152291151095765898833252106",
                "33487450812861855684977699837074982214",
                "156177296855409204917494109627340021224",
                "28935205006660275524540610779865485767",
                "210553129733421388888414539356503469635",
                "136763949954476928575193798721511549780",
                "203798847908776876964829061812327938808",
                "95417632177334447151188236512795079719",
                "235992272343114640697301539939737145564",
                "320047529741227595462410622517132115570",
                "249915097149745523870856620504458076714",
                "179551704246789523175837604993914912979",
                "209076635447727799552043523678434777791",
                "327558368727730245274262788136893685571",
                "129789822044065685688424156220198391495",
                "210567753389724015075532642445593969242",
                "195981249470264844520643222457211699256",
                "89143415756118806730004199190130416546",
                "170696594353541540294725804515530718576",
                "193849648166852972860811747288135427979",
                "199744812217048606887026979710389871664",
                "232649458595634778538268532519143075309",
                "122381251832255629853192323726161883634",
                "186653073680416821577511799795471665222",
                "62962390848836413858032155096817664269",
                "178365705590117384517881550218584515863",
                "271641111376205295398618493978287887472",
                "13229693374576091306512388128808595909",
                "292444631660783714394212918075293370791",
                "332633340601978589910411499997160244303",
                "123780154314172493401414100396852824699",
                "122245101710888470379117356966228667869",
                "333048235449635902221708038097380128190",
                "318533609585230031795971595891864129658",
                "238981367575021852782165931053409947674",
                "166707398427769907537766798353323582128",
                "188219316014597956536405465826162656551",
                "22966698096162465346735028083035382907",
                "213712878911022100864952438834957851972",
                "68356513996444214462827395638260430677",
                "282098257643052793293442592720231267823",
                "99969262627178555413995119015650215960",
                "102766077171060707805828406151081981156",
                "220561150180519936298776168841591234473",
                "139364715521761638750142152665261754288",
                "333290183843305184157621713104496915125",
                "1044860168844786228688942864646022012",
                "202401051988920923009281794425912992445",
                "69577295359173288074920166561680559568",
                "181154815808748152116684986942594523842",
                "333142977509198507031092390194383357177",
                "97439393247579069585721331588632056023",
                "2882487777715129282591859439389015714",
                "46786494835915191644523919831876428632",
                "302932908810281266684949357551950907423",
                "324342731855540724267686859443608453607",
                "282984289462248060320026477756609061211",
                "2447715258558974450879879599388447666",
                "136387683768962387268113313970663666133",
                "160683355006513282358308892891996940962",
                "141806766193677670326015300354183560104",
                "306596355433532543123285991897212601822",
                "24885712570596510417739298728305824003",
                "236932941596405009065404670071160849265",
                "319681721852100737046271375282767246291",
                "121826377289666087129892752976237965138",
                "303698084412134240372371609519648896817",
                "317009935507031825219565295781081359039",
                "81424060644777247234754501177913453582",
                "6517448614159410076656127733701692208",
                "115910756977760573976440091399440040417",
                "25593310722106572772727855031512788885",
                "42877661216537199086809018588488729451",
                "142611307163728189033314304069218076782",
                "88051337828325046975958513698221555898",
                "235992272343114640697301539939737145564",
                "320047529741227595462410622517132115570",
                "249915097149745523870856620504458076714",
                "179551704246789523175837604993914912979",
                "209076635447727799552043523678434777791"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "util/cbfstool/elogtool.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-6d05536b",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "279189367702143789681182215173042461476",
                "94732300597935061671957618582521713431",
                "171503374722021335751877014014698551987",
                "59174758725309461934303640883461508352",
                "83106950441693641449962670197356168925",
                "67973776578048049563590073594667394166",
                "98763381145482265656554974397431206791",
                "81831037360707149074067457409564425313",
                "62650898915098881323724157776892484128",
                "228626492276985917148316241906359894782",
                "202755491778892702909815888779513372592",
                "295887867936885947786567203687902593801",
                "262243918910150872234785864171366255673",
                "293838696584317287197614035764227623649",
                "72283167448505667804360585272060587545",
                "141427972621761332405798168353142262736",
                "317628609082400781720866955107457959474",
                "261758792514858543914440319552461122019",
                "20114936486380303831626566994430598701",
                "191211653689608281849725861465940693588",
                "200731587697031086931960662395795497402",
                "224765327108266316018883658620160424847",
                "328408700553625157264751302803493605454",
                "140055541931951244239966361091469176594",
                "220158750355067835354135636307144563887",
                "272228596850850421563242509744730982617",
                "330147430105267535648001791680042668094",
                "331662878721082377706803989485246722756",
                "244377908888495754727565097057070870232",
                "263798343059714543252752905270033538423"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "flashrom_write",
            "file": "util/cbfstool/uflashrom.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-a2cf577b",
        "signature_version": "v1",
        "digest": {
            "length": 1599.0,
            "function_hash": "330200252253322802044488856142790882251"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "flashrom_read",
            "file": "util/cbfstool/uflashrom.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-b5289372",
        "signature_version": "v1",
        "digest": {
            "length": 1110.0,
            "function_hash": "264431064377102917418938184721565619654"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "flashrom_print_cb",
            "file": "util/cbfstool/uflashrom.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-c13eae8c",
        "signature_version": "v1",
        "digest": {
            "length": 235.0,
            "function_hash": "269838656149847548271508505518730551427"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "elog_write",
            "file": "util/cbfstool/elogtool.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-c4d308f3",
        "signature_version": "v1",
        "digest": {
            "length": 589.0,
            "function_hash": "123559663553296414600914463801511411249"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "resize_buf_to_offset",
            "file": "util/cbfstool/uflashrom.c"
        },
        "deprecated": false,
        "source": "https://github.com/coreboot/coreboot/commit/e3e965b13d4806b47aca23a256823efe4319ef5f",
        "id": "CVE-2022-29264-e88d32cc",
        "signature_version": "v1",
        "digest": {
            "length": 233.0,
            "function_hash": "77726855898205296226683643512483813339"
        },
        "signature_type": "Function"
    }
]
vanir_signatures_modified 
"2026-08-12T13:01:06Z"