Browse CVEs

HIGH 7.8 CVE-2022-34325 DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through… Insydeh2o 05.27.23 / 05.36.23+ Fix from $1,9502022-11-14 MEDIUM 6.4 CVE-2022-33982 DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to cor… Kernel 5.2.05.27.23 / 5.3.05.36.23+ Fix from $1,6002022-11-14 MEDIUM 6.4 CVE-2022-33907 DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption thro… Kernel 5.2.05.27.25 / 5.3.05.36.25+ Fix from $1,6002022-11-14 MEDIUM 6.4 CVE-2022-30773 DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they ar… Kernel 5.4.05.44.23 / 5.5.05.52.23+ Fix from $1,6002022-11-14 MEDIUM 6.4 CVE-2022-32266 DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and … Kernel 5.3.05.36.23 / 5.4.05.44.23+ Fix from $1,6002022-11-14 HIGH 8.2 CVE-2022-36448 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler … Insydeh2o 05.44.30 / 05.52.30+ Fix from $1,9502022-09-28 HIGH 8.2 CVE-2022-35893 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver a… Insydeh2o 05.09.37 / 05.17.37+ Fix from $1,9502022-09-23 HIGH 8.2 CVE-2022-36338 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, creating S… Insydeh2o after 5.5 Fix from $1,9502022-09-23 MEDIUM 6.0 CVE-2022-35894 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer a… Insydeh2o 05.09.37 / 5.17.37+ Fix from $1,6002022-09-22 HIGH 8.2 CVE-2022-35408 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads … Insydeh2o 05.09.38 / 5.17.38+ Fix from $1,9502022-09-22 MEDIUM 6.0 CVE-2022-35896 An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRA… Insydeh2o after 5.5 Fix from $1,6002022-09-22 HIGH 8.2 CVE-2022-35895 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for… Insydeh2o 05.09.37 / 05.17.37+ Fix from $1,9502022-09-21 HIGH 8.2 CVE-2021-41837 An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM … Insydeh2o 5.08.41 / 5.16.41+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-41838 An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access … Insydeh2o 5.16.42 / 5.26.42+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-41839 An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes S… Insydeh2o 5.16.25 / 5.26.25+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-41840 An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access… Insydeh2o 5.23.35 / 5.32.35+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-41841 An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access th… Insydeh2o 5.08.29 / 5.16.29+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-42060 An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 befo… Insydeh2o 05.08.49 / 5.16.42+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-42113 An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 … Insydeh2o 5.14.34 / 5.24.34+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-42554 An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 befor… Insydeh2o 5.08.42 / 5.16.42+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-43323 An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26… Insydeh2o 5.08.45 / 5.16.45+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2021-43615 An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.4… Insydeh2o 5.16.23 / 5.23.22+ Fix from $1,9502022-02-03 HIGH 8.2 CVE-2022-24031 An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker t… Insydeh2o 5.16.42 / 5.26.42+ Fix from $1,9502022-02-03 HIGH 7.5 CVE-2022-24030 An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to w… Insydeh2o 5.08.41 / 5.16.41+ Fix from $1,9502022-02-03 MEDIUM 6.7 CVE-2021-42059 An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.… Insydeh2o 5.08.41 / 5.16.41+ Fix from $1,6002022-02-03 HIGH 8.2 CVE-2021-33627 An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.… Insydeh2o 5.08.29 / 5.16.29+ Fix from $1,9502022-02-03 HIGH 7.5 CVE-2021-33625 An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EF… Insydeh2o 5.16.23 / 5.26.23+ Fix from $1,9502022-02-03 HIGH 7.5 CVE-2020-5953 A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT … Insydeh2o Mitigation only Fix from $1,9502022-02-03 HIGH 8.2 CVE-2022-24069 An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35… Insydeh2o 5.08.29 / 5.16.29+ Fix from $1,9502022-02-03 HIGH 7.5 CVE-2021-43522 An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurity… Insydeh2o 5.14.34 / 5.24.34+ Fix from $1,9502022-02-03