CVE-2022-36337

creationtimestamp| type| source ---|---|--- 2022-11-23 07:13:49+00:00| seen| https://t.me/cibsecurity/53398 2025-04-29 23:50:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw33m5r2p...

CVE-2022-36337

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code...

CVE-2022-36337

CVE-2022-36337 affects Insyde InsydeH2O, with kernel 5.0–5.5. A stack buffer overflow in the MebxConfiguration driver can cause arbitrary code execution when a UEFI variable is read by BIOS code, potentially enabling local compromise. Remediation guidance present in PT-2022-23314 suggests tempora...