Buffer Validation Flaw in Fujitsu BIOS on Lifebook Devices
CVE-2022-28806

7.8HIGH

Key Information:

Vendor: Fujitsu
Status: Lifebook A3510 Firmware
Vendor: CVE Published:; 4 May 2022

What is CVE-2022-28806?

A vulnerability in certain Fujitsu Lifebook devices allows insecure registration of a Software System Management Interrupt (SWSMI) handler. This flaw arises from insufficient validation, enabling attackers to potentially write fixed data to System Management RAM (SMRAM). This can lead to data corruption, privilege escalation from ring 0 to ring -2, allowing unauthorized execution of arbitrary code within the System Management Mode (SMM). The affected models include A3510, U9310, U7511/U7411/U7311, U9311, E5510, U7510/U7410, U7310, E459, and E449, with specific BIOS version limitations. Timely updates and security measures are essential to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch