Description
A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.
Advisories 1
- WID-SEC-2024-0609 Insyde UEFI Firmware und Lenovo BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 12, 2024