insyde Vulnerability Advisory Catalog

Total 101 security vulnerabilities recorded for insyde software and firmware.

← Back to All Vendors
Component: insydeh2o

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An att...

📅 2023-04-11
CVSS 8.8 Dossier →
Component: insydeh2o

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pa...

📅 2023-04-11
CVSS 8.4 Dossier →
Component: insydeh2o

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates...

📅 2023-04-11
CVSS 8.8 Dossier →
Component: insydeh2o

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malform...

📅 2023-04-11
CVSS 8.8 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared buffer used by SMM and non-SM...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM c...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could ca...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code could cau...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the AhciBusDxe shared buffer used by SMM and non-SMM code coul...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the HddPassword shared buffer used by SMM and non-SMM code cou...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared buffer used by SMM and non-SMM co...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could ca...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code could caus...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the IdeBusDxe shared buffer used by SMM and non-SMM code could...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the StorageSecurityCommandDxe shared buffer used by SMM and no...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: insydeh2o

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the command buffer to pass input and out...

📅 2023-02-15
CVSS 7.0 Dossier →
Component: kernel

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads t...

📅 2022-11-23
CVSS 8.2 Dossier →
Component: kernel

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility...

📅 2022-11-22
CVSS 7.8 Dossier →
Component: kernel

An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the ...

📅 2022-11-21
CVSS 6.8 Dossier →
Component: kernel

Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with ...

📅 2022-11-15
CVSS 8.2 Dossier →
Component: kernel

Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory Incorrect pointer checks within the NvmExpressDx...

📅 2022-11-15
CVSS 8.2 Dossier →
Component: kernel

SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrusted inputs leading to corruptio...

📅 2022-11-15
CVSS 8.2 Dossier →
Component: kernel

Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of the PnpSmm...

📅 2022-11-15
CVSS 8.2 Dossier →
Component: kernel

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead ...

📅 2022-11-15
CVSS 8.2 Dossier →
Page 2 of 5 (101 Total Records)