CVE-2024-52878

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver,...

CVE-2024-52878

A buffer over-read vulnerability exists in the VariableRuntimeDxe driver of the Insyde InsydeH2O kernel. The flaw occurs because the VariableServicesSetVariable() function—which can be invoked by gRT_>SetVariable(), SmmSetSensitiveVariable(), or SmmInternalSetVariable() from SMM—incorrectly us...

CVE-2024-52878: Buffer Over-read

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver,...