https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:38:22 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-180 certfr-2022-avi-180 https://cve.radiocsirt.org/vuln/certfr-2022-avi-180 https://cve.radiocsirt.org/vuln/cnvd-2022-10035 cnvd-2022-10035 https://cve.radiocsirt.org/vuln/cnvd-2022-10035 https://cve.radiocsirt.org/vuln/euvd-2026-350928 EUVD-2026-350928 https://cve.radiocsirt.org/vuln/euvd-2026-350928 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27339 <p>In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).</p> <p>In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-27339 https://cve.radiocsirt.org/vuln/ghsa-67f6-6h83-3w53 <p>An issue was discovered in IdeBusDxe in Insyde InsydeH2O 5.x. Code in system management mode calls a function outside of SMRAM in response to a crafted software SMI, aka Inclusion of Functionality from an Untrusted Control Sphere. Modifying the well-known address of this function allows an attacker to gain control of the system with the privileges of system management mode.</p> <p>An issue was discovered in IdeBusDxe in Insyde InsydeH2O 5.x. Code in system management mode calls a function outside of SMRAM in response to a crafted software SMI, aka Inclusion of Functionality from an Untrusted Control Sphere. Modifying the well-known address of this function allows an attacker to gain control of the system with the privileges of system management mode.</p> https://cve.radiocsirt.org/vuln/ghsa-67f6-6h83-3w53 https://cve.radiocsirt.org/vuln/gsd-2020-27339 gsd-2020-27339 https://cve.radiocsirt.org/vuln/gsd-2020-27339 https://cve.radiocsirt.org/vuln/ssa-306654 <p>Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> <p>Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-306654