Skip to content
OpenAdvisories
High · 8.2 CVE-2025-4425 EUVD-2025-23139GHSA-8mrm-vc83-24x3

SetupAutomationSmm: Stack overflow vulnerability in SMI handler

Published Jul 30, 2025 · Updated Aug 14, 2025 · Assigned by Insyde

Description

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Affected products

VendorProductAffectedFixed
Insyde Software InsydeH2O Feature developed for Lenovo – < L05.05.40.011803.172079 L05.05.40.011803.172079

Advisories 1

References