Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-4423

SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption

Description

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Insyde Software InsydeH2O

Default version status: unknown

  • Feature developed for Lenovo to < L05.05.40.011803.172079affected

References