CVE-2021-42554
- EPSS 0.05%
- Veröffentlicht 03.02.2022 02:15:07
- Zuletzt bearbeitet 21.11.2024 06:27:47
An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vuln...
CVE-2021-33625
- EPSS 0.07%
- Veröffentlicht 03.02.2022 02:15:06
- Zuletzt bearbeitet 21.11.2024 06:09:13
An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows us...
CVE-2020-5953
- EPSS 0.29%
- Veröffentlicht 03.02.2022 01:15:07
- Zuletzt bearbeitet 21.11.2024 05:34:53
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This...