Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-32295

No fix known EPSS 1%

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

Published 2022-06-30 · CVE record · OSV

Products: amperecomputing ampere_altra_firmware, amperecomputing ampere_altra_max_firmware