Insyde's Security Pledge

AcpiS3SaveDxe/ChipsetSvcDxe: A potential DXE memory corruption vulnerability

CVSS Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2024-49200

The use of a pointer originating from the value of an NVRAM variable as the target of a write operation. This type of vulnerability can be used by an attacker to perform arbitrary writes, potentially leading to arbitrary code execution.

kernel 5.2, Version 05.29.44
kernel 5.3, Version 05.38.44
kernel 5.4, Version 05.46.44
kernel 5.5, Version 05.54.44
kernel 5.6, Version 05.61.44
kernel 5.7, Version 05.70.44