458 matches found
EUVD-2022-36942
Malicious code in bioql PyPI...
EUVD-2022-53463
Malicious code in bioql PyPI...
EUVD-2022-33618
Malicious code in bioql PyPI...
EUVD-2022-33621
Malicious code in bioql PyPI...
EUVD-2021-28843
Malicious code in bioql PyPI...
EUVD-2021-30262
Malicious code in bioql PyPI...
EUVD-2022-33622
Malicious code in bioql PyPI...
EUVD-2023-43013
Malicious code in bioql PyPI...
EUVD-2022-53464
Malicious code in bioql PyPI...
EUVD-2023-43015
Malicious code in bioql PyPI...
EUVD-2024-30973
Malicious code in bioql PyPI...
Insyde InsydeH2O security vulnerabilities
Insyde InsydeH2O is a new EFI/UEFI specification from Insyde China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from a buffer overflow that could lead to the execution of arbitrary code...
InsydeH2O security vulnerabilities
InsydeH2O is a customizable firmware codebase from China Insyde Insyde. A security vulnerability exists in InsydeH2O, which stems from an SMRAM memory content leak in the SMM module...
Insyde BIOS Vulnerabilities - Lenovo Support US
No description provided...
CVE-2025-4275
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
CVE-2024-55567
Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary...
PT-2025-25335
Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.4 through 05.46.01 Insyde InsydeH2O kernel versions 5.5 through 05.54.01 Insyde InsydeH2O kernel versions 5.6 through 05.61.01 Insyde InsydeH2O kernel versions 5.7 through 05.70.01 Description Improper input...
CVE-2025-4275
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
CVE-2025-4275 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
CVE-2025-4275 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...