Description
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Insyde Software | InsydeH2O | See in the Solution | — |
Advisories 1
- WID-SEC-2026-3033 Insyde UEFI Firmware: Schwachstelle ermöglicht nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 14, 2026