EUVD-2023-31149

Malicious code in bioql PyPI...

EUVD-2023-29542

Malicious code in bioql PyPI...

EUVD-2022-35548

Malicious code in bioql PyPI...

EUVD-2022-36020

Malicious code in bioql PyPI...

PT-2025-31366 · Lenovo +1 · Lenovo +1

Name of the Vulnerable Software and Affected Versions: InsydeH2O firmware for Lenovo affected versions not specified Description: A high-severity stack overflow exists in InsydeH2O firmware used in Lenovo products. Local attackers with privileges could potentially gain deep system control...

PT-2025-31367 · Lenovo · Lenovo

Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: The issue was identified in custom firmware developed for Lenovo devices. Additional information is available on the Lenovo Product Security Advisories and Announcements webpage...

PT-2025-31365 · Lenovo · Lenovo

Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: The issue was identified in code developed specifically for Lenovo. For more information, refer to the "Lenovo Product Security Advisories and Announcements" webpage. Recommendations: At the...

CVE-2022-32953

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...