CVE-2023-52080

The IEIT NF5280M6 UEFI firmware (versions through 8.4 ) is affected by a pool overflow vulnerability. This issue is caused by the improper use of the gRT->GetVariable() function. An attacker with access to local NVRAM variables can exploit this by modifying variables on the SPI Flash , leading...

PT-2022-23315 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions 5.0 through 5.5 Description: An issue was discovered in Insyde InsydeH2O, where an SMM callout vulnerability in the SMM driver FwBlockServiceSmm leads to arbitrary code execution. This occurs when creating SMM,...