The vulnerability of the AhciBusDxe driver in the InsydeH2O UEFI firmware creation framework allows a hacker to escalate their privileges.

The vulnerability of the AhciBusDxe driver used by the InsydeH2O UEFI firmware creation framework lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...