Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10280)

Insyde InsydeH2O is a C source from Insyde Software (Taiwan, China) that implements the new technology “EFI/UEFI” specification, designed to replace the traditional BIOS (Basic Input/Output System). Operating System (H2O) UEFI firmware suffers from a buffer overflow vulnerability that could be exploited to access the UEFI DXE driver and execute arbitrary code.