VYPR
← All advisories
High severity8.2NVD Advisory· Published Sep 21, 2022· Updated Jun 17, 2026

CVE-2022-35895

CVE-2022-35895

Description

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Insyde/InsydeH2O2 versions
    cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*range: >=5.0,<05.09.37
    • (no CPE)range: 5.0-5.5
  • Insyde/InsydeH2Odescription

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.