How severe is CVE-2024-25079?

CVE-2024-25079 has a CVSS v3 score of 7.4 (HIGH).

CVE-2024-25079

Name: insydeh2o
Author: insyde

7.4HIGH

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 befo

Publicado: 5/15/2024Atualizado: 8/4/2025

Descrição

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.

Análise IADesenvolvido por IA

Produtos Afetados

insydeinsydeh2o

Referências

https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory