Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2021-43614

VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Insyde

Description

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Insyde Software InsydeH2O

Default version status: unaffected

  • InsydeH2OUvePkg to < 01.01.04.0008affected

References