How severe is CVE-2024-25079?

CVE-2024-25079 has a CVSS v3 score of 7.4 (HIGH).

CVE-2024-25079

Name: insydeh2o
Author: insyde

7.4HIGH

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 befo

Veröffentlicht: 5/15/2024Aktualisiert: 8/4/2025

Beschreibung

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.

KI-AnalyseKI-gestützt

Betroffene Produkte

insydeinsydeh2o

Referenzen

https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory