Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10275)

2022-02-0900:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.0004 Low

EPSS

Percentile

12.6%

JSON

Insyde InsydeH2O is a C source from Insyde Software (Taiwan, China) that implements the new technology “EFI/UEFI” specification, designed to replace the legacy BIOS (Basic Input/Output System). Operating System (H2O) UEFI firmware has a buffer overflow vulnerability that can be exploited to write fixed or predictable data to SMRAM.

CPENameOperatorVersion
insyde ahcibusdxeeq05.14.34
insyde ahcibusdxeeq05.24.34
insyde ahcibusdxeeq05.33.34

Name	Operator	Version
insyde ahcibusdxe	eq	05.14.34
insyde ahcibusdxe	eq	05.24.34
insyde ahcibusdxe	eq	05.33.34

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CNVD-2022-10275