Buffer overflow

2022-01-0523:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).

CPENameOperatorVersion
insydeh2oge5.1
insydeh2olt5.16.25
insydeh2oge5.2
insydeh2olt5.26.25
insydeh2oge5.3
insydeh2olt5.35.25
insydeh2oge5.4
insydeh2olt5.43.25
insydeh2oge5.5
insydeh2olt05.51.25

Name	Operator	Version
insydeh2o	ge	5.1
insydeh2o	lt	5.16.25
insydeh2o	ge	5.2
insydeh2o	lt	5.26.25
insydeh2o	ge	5.3
insydeh2o	lt	5.35.25
insydeh2o	ge	5.4
insydeh2o	lt	5.43.25
insydeh2o	ge	5.5
insydeh2o	lt	05.51.25