What’s Vulnerable › Vulnerabilities

CVE-2022-35894

• Severity: medium (CVSS 6.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-22 · updated 2026-06-17
• Weakness: CWE-401

Description

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.

Affected products

• Insydeh2O: from 5.0 before 05.09.37; from 5.1 before 5.17.37; from 5.2 before 05.27.29; from 5.3 before 05.36.29; from 5.4 before 05.44.29; from 5.5 before 05.52.29 — fixed in 05.09.37, 05.27.29, 05.36.29, 05.44.29, 05.52.29, 5.17.37

How to fix

Upgrade to a fixed version: Insydeh2O 05.09.37, 05.27.29, 05.36.29, 05.44.29. Check the vendor advisory for mitigations.

References

• https://binarly.io/advisories/BRLY-2022-018/index.html
• https://www.insyde.com/security-pledge
• https://www.insyde.com/security-pledge/SA-2022030
• https://binarly.io/advisories/BRLY-2022-018/index.html
• https://www.insyde.com/security-pledge
• https://www.insyde.com/security-pledge/SA-2022030

Get alerted when CVE-2022-35894 or the next vulnerability affects your stack