Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2025-4424

SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler

Description

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Insyde Software InsydeH2O

Default version status: unknown

  • Feature developed for Lenovo to < L05.05.40.011803.172079affected

References