An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.
References
Link | Resource |
---|---|
https://www.insyde.com/security-pledge | Not Applicable |
https://www.insyde.com/security-pledge/SA-2023028 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-08-03T00:00:00
Updated: 2023-08-03T00:00:00
Reserved: 2023-02-08T00:00:00
Link: CVE-2023-25600
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-08-03T15:15:19.340
Modified: 2023-08-08T15:58:49.607
Link: CVE-2023-25600
JSON object: View
Redhat Information
No data.
CWE