741 matches found
PT-2025-31364 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Lenovo devices running InsydeH2O firmware affected versions not specified Description: A high-severity flaw exists in Lenovo devices running InsydeH2O firmware. Local attackers with privileges can exploit a buffer flaw to escalate access...
PT-2025-31366 · Lenovo +1 · Lenovo +1
Name of the Vulnerable Software and Affected Versions: InsydeH2O firmware for Lenovo affected versions not specified Description: A high-severity stack overflow exists in InsydeH2O firmware used in Lenovo products. Local attackers with privileges could potentially gain deep system control...
InsydeH2O 安全漏洞
InsydeH2O is a customizable firmware code base from China Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a corrupted SMM memory in the SMM module...
InsydeH2O 安全漏洞
InsydeH2O is a customizable firmware codebase from China-based Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a stack overflow in the SMI handler...
PT-2025-31361 · Lenovo · Lenovo Firmware
Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: The issue was identified in Lenovo firmware code and enables unauthorized system access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
PT-2025-31363
Name of the Vulnerable Software and Affected Versions Lenovo affected versions not specified Description The issue was identified in code developed specifically for Lenovo. For more information, refer to the “Lenovo Product Security Advisories and Announcements” webpage. Recommendations At the...
InsydeH2O 安全漏洞
InsydeH2O is a customizable firmware code base from China Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a corrupted SMM memory in the SMM module...
PT-2025-31367 · Lenovo · Lenovo
Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: The issue was identified in custom firmware developed for Lenovo devices. Additional information is available on the Lenovo Product Security Advisories and Announcements webpage...
InsydeH2O 安全漏洞
InsydeH2O is a customizable firmware codebase from China Insyde Insyde. A security vulnerability exists in InsydeH2O, which stems from an SMRAM memory content leak in the SMM module...
PT-2025-31365 · Lenovo · Lenovo
Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: The issue was identified in code developed specifically for Lenovo. For more information, refer to the "Lenovo Product Security Advisories and Announcements" webpage. Recommendations: At the...
InsydeH2O 安全漏洞
InsydeH2O is a customizable firmware codebase from China Insyde Insyde. A security vulnerability exists in InsydeH2O, which stems from a flaw in the SMM module that allows an attacker to write arbitrary code and cause memory corruption...
InsydeH2O 安全漏洞
InsydeH2O is a customizable firmware codebase from China's Insyde Insyde Corporation. A security vulnerability exists in InsydeH2O, which originates from an arbitrary call to SmmSetVariable with unsanitized parameters in the SMI handler...
The vulnerability of the IhisiServiceSmm component in the InsydeH2O UEFI firmware creation framework allows a attacker to escalate their privileges.
The vulnerability of the IhisiServiceSmm component in the InsydeH2O UEFI firmware creation framework is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2024-55567
Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary...
CVE-2024-55567
Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary...
CVE-2024-55567
CVE-2024-55567 affects InsydeH2O kernel (Insyde USB core) with a flaw in UsbCoreDxe that allows an SMM-level write of arbitrary memory due to improper input validation. Affected versions include InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.0...
CVE-2024-55567
Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary...
PT-2025-25335
Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.4 through 05.46.01 Insyde InsydeH2O kernel versions 5.5 through 05.54.01 Insyde InsydeH2O kernel versions 5.6 through 05.61.01 Insyde InsydeH2O kernel versions 5.7 through 05.70.01 Description Improper input...
Insyde InsydeH2O kernel 安全漏洞
Insyde InsydeH2O kernel is a program kernel for updating computer BIOS from Insyde, a Chinese company. A security vulnerability exists in the Insyde InsydeH2O kernel, which stems from improper validation of UsbCoreDxe inputs and could lead to the execution of arbitrary code at the SMM level. The...
