Insyde Security Advisory 2023067

Insyde ID Advisory Category Impact of Vulnerability Severity Rating Original Date Last Revised
INSYDE-SA-2023067 Software CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N 4.7 04/09/2024 04/09/2024


PnpSmm: Possible out of bounds in SMM communication buffer, leading to tampering.

Vulnerability Details:

CVE-2023-47252: The PNP software SMI sub-functions do not verify data size which could lead to data tampering.

Solution Information:
kernel 5.2: Version in 05.28.45
kernel 5.3: Version in 05.37.45
kernel 5.4: Version in 05.45.45
kernel 5.5: Version in 05.53.45
kernel 5.6: Version in 05.60.45

Revision History:

Revision Date Description
1.0 04/09/2024 Initial Release
- - -

Return to Insyde's Security Pledge