CVE-2024-25078

A memory corruption vulnerability exists in the StorageSecurityCommandDxe component of the Insyde InsydeH2O UEFI firmware. This flaw allows for escalating privileges in SMM . Affected versions include those prior to kernel 5.2 (IB19130163 in 05.29.07), kernel 5.3 (IB19130163 in 05.38.07), kernel ...