Skip to content
OpenAdvisories
High · 8.2 CVE-2025-4422 EUVD-2025-23142GHSA-mpfc-4gcg-9qr5

EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module

Published Jul 30, 2025 · Updated Aug 14, 2025 · Assigned by Insyde

Description

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Affected products

VendorProductAffectedFixed
Insyde Software InsydeH2O Feature developed for Lenovo – < L05.05.40.011803.172079 L05.05.40.011803.172079

Advisories 1

References