CVE-2026-9805 | BDVDB-2026-364930 Detail
Insyde SoftwareInsydeH2O
Description#
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: physical.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.