CVE-2023-25600

2023-08-0300:00:00

mitre

www.cve.org

insydeh2o

efi variable

denial of service

out-of-bounds memory reads

cve-2023-25600

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.

References

www.insyde.com/security-pledge

www.insyde.com/security-pledge/SA-2023028