CVE-2021-42554

CVE-2021-42554 concerns an SMM memory corruption in InsydeH2O’s FvbServicesRuntimeDxe, allowing an attacker to write fixed or predictable data to SMRAM and potentially escalate to System Management Mode. Affected firmware is InsydeH2O with Kernel 5.0 before 05.08.42, 5.1 before 05.16.42, 5.2 befo...

CVE-2021-41839

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges...

CVE-2021-41837

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to...

CVE-2022-24030

CVE-2022-24030 affects InsydeH2O’s AhciBusDxe driver. The issue is an SMM memory corruption vulnerability in kernel 5.1–5.5 that allows writing fixed or predictable data to SMRAM, enabling privilege escalation to System Management Mode. Affected kernel/workload context is local with no user inter...

CVE-2022-24030

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM...

CVE-2021-43615

An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and 5.5 before 05.51.22. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting thi...

CVE-2020-5953

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...

CVE-2021-43522

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to...

Memory corruption

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to...

PT-2022-11493

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.0 through 5.5 Description An issue was discovered in AhciBusDxe due to an Untrusted Pointer Dereference, causing SMM memory corruption. This allows an attacker to write fixed or predictable data to SMRAM,...

PT-2022-10274

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O Kernel versions 5.0 through 5.0 before 05.09.11 Insyde InsydeH2O Kernel versions 5.1 through 5.1 before 05.17.11 Insyde InsydeH2O Kernel versions 5.2 through 5.2 before 05.27.11 Insyde InsydeH2O Kernel versions 5.3 through 5.3...

CVE-2021-43615: Out-of-bounds Write

An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and 5.5 before 05.51.22. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting thi...

CVE-2021-42554: Out-of-bounds Write

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a...

CVE-2021-33627: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate function of the EFISMMCOMMUNICATIONPROTOC...

CVE-2021-43522: Out-of-bounds Write

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to...

PT-2022-1745

Name of the Vulnerable Software and Affected Versions InsydeH2O versions 5.0 through 5.0 before 05.08.42 InsydeH2O versions 5.1 through 5.1 before 05.16.42 InsydeH2O versions 5.2 through 5.2 before 05.26.42 InsydeH2O versions 5.3 through 5.3 before 05.35.42 InsydeH2O versions 5.4 through 5.4 befo...

PT-2022-9047

Name of the Vulnerable Software and Affected Versions InsydeH2O UEFI Firmware affected versions not specified Description A vulnerability exists in the System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code. The SWSMI handler dereferences the gRT EFI RUNTIME SERVICES pointer to...

PT-2022-10273

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O Kernel 5.x Description An issue was discovered in Insyde InsydeH2O, affecting HddPassword, where software SMI services using the Communicate function of the EFI SMM COMMUNICATION PROTOCOL do not validate the buffer address,...

CVE-2021-43522

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to...

PT-2022-11868

Name of the Vulnerable Software and Affected Versions InsydeH2O kernel versions 5.1 through 2021-11-08 InsydeH2O kernel versions 5.2 through 2021-11-08 InsydeH2O kernel versions 5.3 through 2021-11-08 Description An issue in InsydeH2O allows an attacker to write fixed or predictable data to SMRAM...