CVE-2024-25079

HIGH

InsydeH2O kernel <5.6 - Memory Corruption

Title source: llm
STIX 2.1

Description

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.

References (2)

Scores

CVSS v3 7.4
EPSS 0.0011
EPSS Percentile 29.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-763
Status published
Products (1)
insyde/insydeh2o 5.2 - 5.29.09
Published May 15, 2024
Tracked Since Feb 18, 2026