Description
The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Insyde Software | InsydeH2O tools | See in the Solution | — |
Advisories 1
- WID-SEC-2026-0092 Insyde UEFI Firmware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 27, 2026