Insyde InsydeH2O Buffer Overflow Vulnerability

Insyde InsydeH2O is a C source from Insyde Software (Taiwan, China) that implements the new technology “EFI/UEFI” specification, designed to replace the legacy BIOS (Basic Input/Output System). Overflow vulnerability, which results from a boundary error when handling untrusted input. An attacker could exploit this vulnerability to execute arbitrary code.