5 matches found
Memory corruption
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash...
CVE-2021-33834
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash...
CVE-2021-33834
The CVE-2021-33834 issue affects iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, input used to allocate a buffer and copy memory is mishandled, leading to memory corruption or a system crash. Red Hat and NVD entries confirm the same vulnerability across multiple ad...
Insyde H2OFFT Buffer Error Vulnerability
Insyde H2OFFT is a set of tools for BIOS firmware development from Insyde Corporation of Taiwan, China. A security vulnerability exists in Insyde H2OFFT version 3.00.01.00 and prior versions, which stems from a vulnerability in the driver iscflashx64.sys that could allow an authorized user to...
CVE-2021-33834
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash...