Browse CVEs

MEDIUM 6.7 CVE-2024-55567 Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and … Insydeh2o 5.4.05.47.01 / 5.5.05.55.01+ Fix from $1,6002025-06-12 HIGH 7.9 CVE-2024-52880 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5… Kernel 5.29.50 / 5.38.50+ Fix from $1,9502025-05-15 HIGH 7.5 CVE-2024-52879 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5… Insydeh2o 5.2.05.29.50 / 5.3.05.38.50+ Fix from $1,9502025-05-15 HIGH 7.5 CVE-2024-52877 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5… Insydeh2o 5.2.05.29.50 / 5.3.05.38.50+ Fix from $1,9502025-05-15 HIGH 7.5 CVE-2024-52878 An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.5… Insydeh2o 5.2.05.29.50 / 5.3.05.38.50+ Fix from $1,9502025-05-15 MEDIUM 6.4 CVE-2024-49200 An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2 though 5.7. A potential DXE memory corruption vulnerab… Kernel Mitigation only Fix from $1,6002025-04-15 HIGH 7.4 CVE-2024-25079 A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.… Insydeh2o 5.29.09 / 5.38.09+ Fix from $1,9502024-05-15 HIGH 7.4 CVE-2024-25078 A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 … Kernel 5.29.07 / 5.38.07+ Fix from $1,9502024-05-15 MEDIUM 6.3 CVE-2023-47252 An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication … Kernel 5.28.45 / 5.37.45+ Fix from $1,6002024-04-26 MEDIUM 5.3 CVE-2022-46897 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or f… Kernel after 5.5 Fix from $1,6002024-04-22 HIGH 7.8 CVE-2023-39283 An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows atta… Insydeh2o after 5.5 Fix from $1,9502023-11-02 MEDIUM 5.5 CVE-2023-39284 An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitize… Insydeh2o 5.2.05.28.33 / 5.3.05.37.33+ Fix from $1,6002023-11-02 CRITICAL 9.8 CVE-2023-39281 A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrar… Insydeh2o Mitigation only Fix from $2,3002023-11-01 MEDIUM 5.3 CVE-2023-30633 An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malwar… Insydeh2o 5.3.05.37.17 / 5.4.05.45.17+ Fix from $1,6002023-10-19 HIGH 7.8 CVE-2023-34195 An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The implementation of the GetImage met… Insydeh2o 5.2.05.28.22 / 5.3.05.37.22+ Fix from $1,9502023-09-18 HIGH 7.1 CVE-2021-33834 An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and co… H2offt Mitigation only Fix from $1,9502023-09-08 MEDIUM 5.5 CVE-2023-27471 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information conta… Insydeh2o Mitigation only Fix from $1,6002023-08-18 HIGH 7.5 CVE-2023-31041 An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in … Insydeh2o Mitigation only Fix from $1,9502023-08-14 MEDIUM 5.5 CVE-2023-27373 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-… Insydeh2o Mitigation only Fix from $1,6002023-08-07 MEDIUM 6.5 CVE-2023-28468 An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI… Kernel after 5.5 Fix from $1,6002023-08-03 HIGH 7.1 CVE-2023-25600 An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory r… Insydecrpkg 01.01.04.0016+ Fix from $1,9502023-08-03 HIGH 7.8 CVE-2023-22616 An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does … Insydeh2o after 5.5 Fix from $1,9502023-04-12 MEDIUM 5.5 CVE-2022-24350 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within … Insydeh2o after 5.5 Fix from $1,6002023-04-12 HIGH 8.8 CVE-2023-22613 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An at… Insydeh2o Mitigation only Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-22612 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malfor… Insydeh2o Mitigation only Fix from $1,9502023-04-11 HIGH 8.8 CVE-2023-22614 An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard update… Insydeh2o No fix yet Fix from $1,9502023-04-11 HIGH 8.4 CVE-2023-22615 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can p… Insydeh2o Mitigation only Fix from $1,9502023-04-11 HIGH 7.0 CVE-2022-32477 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared buffer used by SMM and non-S… Insydeh2o 5.2.05.27.27 / 5.3.05.36.27+ Fix from $1,9502023-02-15 HIGH 7.0 CVE-2022-32469 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could c… Insydeh2o 5.2.05.27.27 / 5.3.05.36.27+ Fix from $1,9502023-02-15 HIGH 7.0 CVE-2022-32475 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM … Insydeh2o 5.2.05.27.27 / 5.3.05.36.27+ Fix from $1,9502023-02-15