CVE-2023-25600 | BDVDB-2026-208583 Detail

Description#

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2023028

Exploit#

No public exploit known

History#

Version 12023-08-03Record published in the CVE List.
Version 22024-10-17Most recent update recorded in the CVE List.