EUVD-2024-54547

Malicious code in bioql PyPI...

CVE-2024-52877

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver,...

CVE-2024-52877

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver,...

CVE-2024-52877

CVE-2024-52877 affects Insyde InsydeH2O kernel variants prior to certain fixed builds. The root cause is a buffer over-read in the VariableRuntimeDxe driver: the SmmCreateVariableLockList() callback calls CreateVariableLockListInSmm(), which uses StrSize() to obtain the variable name size, enabli...