Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2024-25078

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and kernel 5.6: IB19130163 in 05.61.07 could lead to escalating privileges in SMM.

  • Published: May 15, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-25078
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.4
  • AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L

CWEs:

Software From Fixed in
insyde / kernel 5.2 5.29.07
insyde / kernel 5.3 5.38.07
insyde / kernel 5.4 5.46.07
insyde / kernel 5.5 5.54.07
insyde / kernel 5.6 5.61.07