How severe is CVE-2024-25079?

CVE-2024-25079 has a CVSS v3 score of 7.4 (HIGH).

CVE-2024-25079

Name: insydeh2o
Author: insyde

7.4HIGH

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 befo

Publicado: 5/15/2024Actualizado: 8/4/2025

Descripción

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.

Análisis IAImpulsado por IA

Productos Afectados

insydeinsydeh2o

Referencias

https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory