Security Advisory

CVE-2023-25600

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-03 00:00:00

Last updated 2024-10-17 20:08:36

Assigner mitre

State PUBLISHED

Description

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.

← Browse all CVEs View on cve.org ↗