CVE-2023-22613 | BDVDB-2026-199738 Detail

Description#

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-04-11Record published in the CVE List.
2. Version 22025-02-11Most recent update recorded in the CVE List.