What’s Vulnerable › Vulnerabilities

CVE-2022-35895

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-21 · updated 2026-06-17
• Weakness: CWE-787

Description

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution.

Affected products

• Insydeh2O: from 5.0 before 05.09.37; from 5.1 before 05.17.37; from 5.2 before 05.27.29; from 5.3 before 05.36.29; from 5.4 before 05.44.29; from 5.5 before 05.52.29 — fixed in 05.09.37, 05.17.37, 05.27.29, 05.36.29, 05.44.29, 05.52.29

How to fix

Upgrade to a fixed version: Insydeh2O 05.09.37, 05.17.37, 05.27.29, 05.36.29. Check the vendor advisory for mitigations.

References

• https://binarly.io/advisories/BRLY-2022-024/index.html
• https://www.insyde.com/security-pledge
• https://www.insyde.com/security-pledge/SA-2022033
• https://binarly.io/advisories/BRLY-2022-024/index.html
• https://www.insyde.com/security-pledge
• https://www.insyde.com/security-pledge/SA-2022033

Get alerted when CVE-2022-35895 or the next vulnerability affects your stack