CVE-2022-35894

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5

Medium · published September 22, 2022

CVSS v3.1
6.0
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.6th percentile
Published
2022-09-22T17:07Z
EPSS history
Timeline
  • 22 SEP 17:07Z
    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5
    cvelistv5