Vendor
Insyde Software
23 known vulnerabilities.
Products
17 results · Clear filters · Feed
-
High 8.2
H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.
Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.
-
High 8.2
UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.
-
High 8.2
HDD Password Stored In Plaintext
HDD password plaintext is stored in a UEFI variable.
-
High 8.2
Lack of verified boot to certain FV may cause arbitrary code execution
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.
-
High 7.8
egwindrvx64.sys is potentially vulnerable to a buffer overflow
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
-
High 7.8
egwindrv.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
-
High 7.8
H2OFFT64.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
-
High 7.8
In H2OFFT32.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
-
High 8.2
H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)
Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.
-
High 7.5
SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.
A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitrary code.
-
High 7.5
Tcg2Smm: improper input validation may lead to arbitrary code execution
Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.
-
High 7.5
UsbCoreDxe: improper input validation may lead to arbitrary code execution
UsbCoreDxe has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.
-
High 8.2
SetupAutomationSmm: Stack overflow vulnerability in SMI handler
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home
-
High 8.2
SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home
-
High 8.2
EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home
-
High 8.2
EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home
-
High 7.8CVE-2025-4275 Public exploit
SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed …