CVEvulnerability
CVE-2024-25079
7.4 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.4 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L
- Weaknesses
- CWE-763
Description
A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.
Affected configurations
• insyde insydeh2o (>= 5.2 < 5.29.09)
• insyde insydeh2o (>= 5.3 < 5.38.09)
• insyde insydeh2o (>= 5.4 < 5.46.09)
• insyde insydeh2o (>= 5.5 < 5.54.09)
• insyde insydeh2o (>= 5.6 < 5.61.09)
Related
Weakness · CWE (1)
- CWE-763 Release of Invalid Pointer or Reference weakness
References
- https://www.insyde.com/security-pledge Vendor Advisory
- https://www.insyde.com/security-pledge/SA-2024001 Vendor Advisory
- https://www.insyde.com/security-pledge Vendor Advisory
- https://www.insyde.com/security-pledge/SA-2024001 Vendor Advisory