CVE-2022-29264: Coreboot

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.

Affected products

• Coreboot Coreboot: from 4.13, up to and including 4.16

Published 2022-04-25. Last modified 2026-06-17.