insydeh20 vulnerabilities

2 known vulnerabilities in insydeh20 from Insyde. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  insydeh20: Out-of-bounds Write

  CVE-2023-39283Nov 2, 2023Insyde

  An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.

• 9.8 Critical severity

  insydeh20: Out-of-bounds Write

  CVE-2023-39281Nov 1, 2023Insyde

  A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.