CVE-2021-41289

ASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer

State
Published
Severity
6.3 Medium
Published
Nov 15, 2021
Updated
Sep 17, 2024
Reserved
Sep 15, 2021

Read the record on cve.org

Description

ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attackers can modify the BIOS by replacing or filling in the content of the designated Memory DataBuffer, which causing a failure of integrity verification and further resulting in a failure to boot.

Scores

CVSSScoreVectorSource
3.16.3 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:Htwcert

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
P453UJ BIOSASUS
  • 311Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.