Insyde vulnerabilities
We track 52 vulnerabilities in Insyde products across 5 products. 52 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2025.
Latest Insyde vulnerabilities
- 7.0 High severity
Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdMmcDev
- 7.0 High severity
Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition
DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the Nvm
- 7.0 High severity
Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition
DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the HddPassw
- 7.0 High severity
Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition
DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdHostD
- 7.0 High severity
Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition
DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU attack). DMA transactions which are targeted at input buffers used for the software SMI handler used by the AhciBusDxe driv
- 7.8 High severity
Insydeh2o: Time-of-check Time-of-use (TOCTOU) Race Condition
DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used b
- 8.2 High severity
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory corruption vulnerability in the Software SMI handler in the PnpSmm driver.
- 8.2 High severity
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating p
- 8.2 High severity
Insydeh2o: Write-what-where Condition
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the funct
- 8.2 High severity
Insydeh2o: Out-of-bounds Write
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbi
- 8.2 High severity
RUGGEDCOM APE1808 - BIOS: Out-of-bounds Write
An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.
- 7.5 High severity
RUGGEDCOM APE1808 - BIOS: Out-of-bounds Write
An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.