Insyde Kernel vulnerabilities

• insyde kernel An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before... CVE-2024-52880 7.9 HighMay 15, 2025
• insyde kernel An issue was discovered in AcpiS3SaveDxe and ChipsetSvcDxe in Insyde InsydeH2O with kernel 5.2... CVE-2024-49200 6.4 MediumApril 15, 2025
• insyde insydeh2o, kernel +1 more A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel... CVE-2024-25078 7.4 HighMay 15, 2024
• insyde kernel An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a... CVE-2023-47252 6.3 MediumApril 26, 2024
• insyde insydeh2o, kernel +1 more An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm... CVE-2022-46897 5.3 MediumApril 22, 2024
• insyde kernel An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.... CVE-2023-28468 6.5 MediumAugust 3, 2023
• insyde kernel An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow... CVE-2022-36337 8.2 HighNovember 23, 2022
• insyde kernel An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow... CVE-2022-35407 7.8 HighNovember 22, 2022
• insyde kernel An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in... CVE-2022-35897 6.8 MediumNovember 21, 2022
• insyde kernel Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite... CVE-2022-30772 8.2 HighNovember 15, 2022
• insyde kernel Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI... CVE-2022-30771 8.2 HighNovember 15, 2022
• insyde kernel In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB... CVE-2022-30283 7.5 HighNovember 15, 2022
• insyde kernel Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and... CVE-2022-29279 8.2 HighNovember 15, 2022
• insyde kernel Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS... CVE-2022-29278 8.2 HighNovember 15, 2022
• insyde kernel SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in... CVE-2022-29276 8.2 HighNovember 15, 2022
• insyde kernel In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers... CVE-2022-29275 8.2 HighNovember 15, 2022
• insyde kernel DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could... CVE-2022-33986 6.4 MediumNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI... CVE-2022-33985 7.0 HighNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI... CVE-2022-33984 7.0 HighNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI... CVE-2022-33983 7.0 HighNovember 14, 2022
• insyde kernel DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead... CVE-2022-33982 6.4 MediumNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the HddPassword software SMI... CVE-2022-33909 7.0 HighNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI... CVE-2022-33908 7.0 HighNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the software SMI handler used by... CVE-2022-33907 6.4 MediumNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI... CVE-2022-33906 6.4 MediumNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler... CVE-2022-33905 7.0 HighNovember 14, 2022
• insyde kernel DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software... CVE-2022-32267 6.4 MediumNovember 14, 2022
• insyde kernel DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe... CVE-2022-32266 6.4 MediumNovember 14, 2022
• insyde kernel Update description and links DMA transactions which are targeted at input buffers used for the... CVE-2022-31243 6.4 MediumNovember 14, 2022
• insyde kernel DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after... CVE-2022-30774 6.4 MediumNovember 14, 2022
• insyde kernel DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after... CVE-2022-30773 6.4 MediumNovember 14, 2022
• insyde kernel, tianocore edk ii, edk2 +2 more Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. CVE-2021-38578 Fix available 7.4 HighMarch 3, 2022
• insyde kernel, tianocore edk ii, edk2 +2 more NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. CVE-2021-38575 Fix available 8.1 HighAugust 10, 2021