Insyde

Insydeh2o

84 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-22612

  • EPSS 0.2%
  • Veröffentlicht 11.04.2023 21:15:17
  • Zuletzt bearbeitet 11.02.2025 18:15:21

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.

7

CVE-2022-32477

  • EPSS 0.05%
  • Veröffentlicht 15.02.2023 14:15:12
  • Zuletzt bearbeitet 05.05.2025 17:18:14

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalatio...

7

CVE-2022-32475

  • EPSS 0.05%
  • Veröffentlicht 15.02.2023 14:15:11
  • Zuletzt bearbeitet 05.05.2025 17:18:14

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation o...

7

CVE-2022-32469

  • EPSS 0.05%
  • Veröffentlicht 15.02.2023 14:15:11
  • Zuletzt bearbeitet 05.05.2025 17:18:13

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges...

7

CVE-2022-32953

  • EPSS 0.05%
  • Veröffentlicht 15.02.2023 03:15:10
  • Zuletzt bearbeitet 05.05.2025 17:18:15

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges....

7

CVE-2022-32476

  • EPSS 0.06%
  • Veröffentlicht 15.02.2023 03:15:10
  • Zuletzt bearbeitet 20.03.2025 14:15:15

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the AhciBusDxe shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privil...

7

CVE-2022-32473

  • EPSS 0.06%
  • Veröffentlicht 15.02.2023 03:15:10
  • Zuletzt bearbeitet 20.03.2025 14:15:15

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the HddPassword shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privi...

7

CVE-2022-32470

  • EPSS 0.05%
  • Veröffentlicht 15.02.2023 03:15:09
  • Zuletzt bearbeitet 05.05.2025 17:18:14

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of...

7

CVE-2022-32955

  • EPSS 0.06%
  • Veröffentlicht 15.02.2023 02:15:09
  • Zuletzt bearbeitet 19.03.2025 19:15:38

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges...

7

CVE-2022-32954

  • EPSS 0.05%
  • Veröffentlicht 15.02.2023 02:15:09
  • Zuletzt bearbeitet 20.03.2025 14:15:15

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. ...