Description
An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.
Unscored
CVE-2023-25600
EUVD-2023-29542GHSA-856f-5pr4-jx6q
An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bound…
Published Aug 3, 2023 · Updated Oct 17, 2024 · Assigned by mitre