CVE-2023-39284 | BDVDB-2026-215896 Detail

Description#

An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitized arguments in the SMI handler.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2023056

Exploit#

No public exploit known

History#

Version 12023-11-02Record published in the CVE List.
Version 22024-09-05Most recent update recorded in the CVE List.