CVE-2021-45969: Out-of-bounds Write

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM System Management Mode branch that registers a SWSMI handler that does not...

PT-2022-1742

Name of the Vulnerable Software and Affected Versions InsydeH2O kernel versions 5.1 through 05.16.24 InsydeH2O kernel versions 5.2 through 05.26.24 InsydeH2O kernel versions 5.3 through 05.35.24 InsydeH2O kernel versions 5.4 through 05.43.24 InsydeH2O kernel versions 5.5 through 05.51.24...

CVE-2021-33626: Inclusion of Functionality from Untrusted Control Sphere

A vulnerability exists in SMM System Management Mode branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointerQWORD values for CommBuffer. This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code executio...

PT-2021-20235

Name of the Vulnerable Software and Affected Versions: SMM System Management Mode affected versions not specified Description: A vulnerability exists in the SMM branch that registers a SWSMI handler, which does not sufficiently check or validate the allocated buffer pointer QWORD values for...