Insyde's Security Pledge
Recent Security Advisories
INSYDE-SA-2026006
Product
CVSS Score
Original Date
Last Revised
InsydeH2O
2.7
2026-08-25
Summary
FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow
Vulnerability Details
CVSS Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.
CWE-787: Out-of-bounds Write
Status: Resolved.
Solution Information
Acknowledgements
Revision History
Revision #
Date
Description
1
2026-08-25
Initial Release