https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:25:02.731846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08633 bdu:2023-08633 2026-10-04T20:25:02.826808+00:00 bdu:2023-08633 https://cve.radiocsirt.org/vuln/euvd-2026-270671 EUVD-2026-270671 2026-10-04T20:25:02.826844+00:00 EUVD-2026-270671 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40238 fkie_cve-2023-40238 2026-10-04T20:25:02.826859+00:00

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.

 https://cve.radiocsirt.org/vuln/ghsa-5rp3-83j5-w2g4 GHSA-5rp3-83j5-w2g4 2026-10-04T20:25:02.826890+00:00

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.

 https://cve.radiocsirt.org/vuln/gsd-2023-40238 gsd-2023-40238 2026-10-04T20:25:02.826908+00:00 gsd-2023-40238 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3068 WID-SEC-W-2023-3068 — UEFI BIOS: Mehrere Schwachstellen 2026-10-04T20:25:02.826919+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen im UEFI BIOS verschiedener Hersteller ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.