AT HOME IN YOUR FIRMWARE: ANALYSIS OF CVE-2024-36877

Summary from the TLDR InfoSec newsletter

A vulnerability in MSI SMM driver allowed attackers to run unauthorized code by exploiting a buffer overflow. The exploit involved setting a variable to corrupt SMRAM, leading to potential system compromise. Mitigation required setting DataSize to 8 for status message writing to physical memory.