An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-08-03T00:00:00
Updated: 2024-08-02T11:25:19.304Z
Reserved: 2023-02-08T00:00:00
Link: CVE-2023-25600
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-03T15:15:19.340
Modified: 2023-08-08T15:58:49.607
Link: CVE-2023-25600
Redhat
No data.