CVE-2023-40238

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.

• fujitsu esprimo d556\/2 firmware (< 1.35.0) • fujitsu esprimo d6011 firmware (< 1.31.0) • fujitsu esprimo d6012 firmware (< 3.08.0) • fujitsu esprimo d7010 firmware (< 1.64.0) • fujitsu esprimo d7010\/8 firmware (< 1.64.0) • fujitsu esprimo d7011 firmware (< 1.31.0) • fujitsu esprimo d7012 firmware (< 3.08.0) • fujitsu esprimo d7013 firmware (< 3.08.0) • fujitsu esprimo d738 firmware (< 1.38.0) • fujitsu esprimo d757 firmware (< 1.35.0) • fujitsu esprimo d9010 firmware (< 1.64.0) • fujitsu esprimo d9011 firmware (< 1.31.0) • fujitsu esprimo d9012 firmware (< 3.08.0) • fujitsu esprimo d9013 firmware (< 3.08.0) • fujitsu esprimo d957 firmware (< 1.35.0) • fujitsu esprimo d957\/e9x\+ firmware (< 1.35.0) • fujitsu esprimo d958 firmware (< 1.38.0) • fujitsu esprimo g5010 firmware (< 1.45.0) • fujitsu esprimo g5011 firmware (< 1.27.0) • fujitsu esprimo g558 firmware (< 1.38.0) • fujitsu esprimo g6012 firmware (< 3.08.0) • fujitsu esprimo g9010 firmware (< 1.45.0) • fujitsu esprimo g9012 firmware (< 3.08.0) • fujitsu esprimo g9013 firmware (< 3.08.0) • fujitsu esprimo k5010\/24 firmware (< 1.64.0) • fujitsu esprimo k557\/24 firmware (< 1.18.0) • fujitsu esprimo k558\/24 firmware (< 1.38.0) • fujitsu esprimo p5010 firmware (< 1.64.0) • fujitsu esprimo p5011 firmware (< 1.31.0) • fujitsu esprimo p557 firmware (< 1.35.0) • fujitsu esprimo p558\/power firmware (< 1.38.0) • fujitsu esprimo p6012 firmware (< 3.08.0) • fujitsu esprimo p7010 firmware (< 1.64.0) • fujitsu esprimo p7011 firmware (< 1.31.0) • fujitsu esprimo p7012 firmware (< 3.08.0) • fujitsu esprimo p7013 firmware (< 3.08.0) • fujitsu esprimo p757 firmware (< 1.35.0) • fujitsu esprimo p758 firmware (< 1.38.0) • fujitsu esprimo p9010 firmware (<= 1.64.0) • fujitsu esprimo p9011 firmware (< 1.31.0) • fujitsu esprimo p9012 firmware (< 3.08.0) • fujitsu esprimo p9013 firmware (< 3.08.0) • fujitsu esprimo p957 firmware (< 1.35.0) • fujitsu lifebook u9313x firmware (< 2.12) • fujitsu lifebook u939 firmware (< 2.23) • fujitsu lifebook u939x firmware (< 2.26) • fujitsu lifebook u9413 firmware (< 2.12) • fujitsu stylistic q5010 firmware (< 1.38) • fujitsu stylistic q509 firmware (< 1.37) • fujitsu stylistic q7310 firmware (< 2.27) • fujitsu stylistic q7311 firmware (< 2.36) • fujitsu stylistic q7312 firmware (< 2.17) • fujitsu stylistic q739 firmware (< 2.21) • fujitsu primequest 3800b firmware (< 2.23.0) • fujitsu primequest 3800b2 firmware (< 1.67.0) • fujitsu primequest 3800e firmware (< pa25021) • fujitsu primequest 3800e2 firmware (< pb25021) • fujitsu primequest 4400e firmware (< fa17001) • fujitsu primergy bx2560 m2 firmware (< 1.21.0) • fujitsu primergy bx2580 m2 firmware (< 1.21.0) … and 131 more