Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10277)

2022-02-0900:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.0004 Low

EPSS

Percentile

5.1%

JSON

Insyde InsydeH2O is a C source from Insyde Software (Taiwan, China) that implements the new technology “EFI/UEFI” specification, designed to replace the legacy BIOS (Basic Input/Output System). Operating System (H2O) UEFI firmware suffers from a buffer overflow vulnerability that could be exploited by an attacker to write fixed or predictable data to SMRAM.

CPENameOperatorVersion
insyde fvbservicesruntimedxeeq05.08.42
insyde fvbservicesruntimedxeeq05.16.42
insyde fvbservicesruntimedxeeq05.26.42
insyde fvbservicesruntimedxeeq05.35.42
insyde fvbservicesruntimedxeeq05.42.51
insyde fvbservicesruntimedxeeq05.50.51

Name	Operator	Version
insyde fvbservicesruntimedxe	eq	05.08.42
insyde fvbservicesruntimedxe	eq	05.16.42
insyde fvbservicesruntimedxe	eq	05.26.42
insyde fvbservicesruntimedxe	eq	05.35.42
insyde fvbservicesruntimedxe	eq	05.42.51
insyde fvbservicesruntimedxe	eq	05.50.51

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CNVD-2022-10277