The vulnerability of the drivers AcpiS3SaveDxe and ChipsetSvcDxe, which are part of the InsydeH2O UEFI firmware creation framework, allows a hacker to execute arbitrary code.

The vulnerability of the AcpiS3SaveDxe and ChipsetSvcDxe drivers in the InsydeH2O UEFI firmware framework is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...