VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.7epss 0.1%
exploitation probability
0.1%top 97% of all CVEs
observed exploitation
nono source reports it
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
Affected products
Insyde Software · InsydeH2O