CVE-2022-35895

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5

High · published September 21, 2022

CVSS v3.1
8.2
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.5th percentile
Published
2022-09-21T20:36Z
EPSS history
Timeline
  • 21 SEP 20:36Z
    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5
    cvelistv5