CVE-2022-32295

—

CVSS 3.1

9.8 critical

EPSS

1%p68

Published

Jul 1, 2022 (Jul 1, 2022)

Modified

Jun 17, 2026

Description

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

Vendors: amperecomputing
Products: ampere altra firmware, ampere altra max firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.