CVE-2024-33656 - CVE House
Back to Database
Status published High CVE-2024-33656

Memory Leak in SmmComuptrace Module

Vulnerability Description

The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-33656

Credits & Attribution

No credits recorded in the NVD database.

References

More from AMI

View All →
CVE-2025-58770
TCG2 TPM RT Not Locked Issue
High 7.2
CVE-2025-33045
Legacy Serial Redirection SMRAM Vulnerabilities
High 8.2
CVE-2025-33044
exFat Memory Corruption Issue
Medium 5.8
CVE-2025-33043
SMM buffer Integrity
Medium 5.8
CVE-2025-22834
ThirdPartyVideo SetVariable Vulnerability
Medium 4.2

Affected Vendor

Affected Software

AptioV
Vulnerable Versions:
BKS_5.0

Timeline

Official Publish: August 21st, 2024
Last Modified: August 21st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-269

MITRE ATT&CK TTPs

T1078 Valid Accounts
Persistence
T1098 Account Manipulation
Privilege Escalation
T1548 Abuse Elevation Control Mechanism
Privilege Escalation
T1222 File and Directory Permissions Modification
Defense Evasion
T1134 Access Token Manipulation
Defense Evasion