Is CVE-2022-33982 actively exploited?

No active exploitation of CVE-2022-33982 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-33982 be exploited remotely?

No. CVE-2022-33982 requires local access to exploit.

What is the CVSS score of CVE-2022-33982?

CVE-2022-33982 has a CVSS score of 6.4 (MEDIUM).

HOME VULNERABILITIESCVE-2022-33982

MEDIUM

CVE-2022-33982

CWE-367Published: November 14, 2022· Updated: Jun 17, 2026

6.4

CVSS v3.1

Official Description

DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. DMA attacks on the parameter buffer used by the software SMI handler used by the driver Int15ServiceSmm could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. This issue was discovered by Insyde engineering during a security review. This issue is fixed in Kernel 5.2: 05.27.23, Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23 CWE-367

NVD Source

Technical Analysis

CVE-2022-33982 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.4.