H2offt Insyde H2offt

Do you want an email whenever new security vulnerabilities are reported in Insyde H2offt?

By the Year

In 2024 there have been 0 vulnerabilities in Insyde H2offt . Last year H2offt had 1 security vulnerability published. Right now, H2offt is on track to have less security vulnerabilities in 2024 than it did last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 1 7.10
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 1 7.80
2018 0 0.00

It may take a day or so for new H2offt vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Insyde H2offt Security Vulnerabilities

An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00

CVE-2021-33834 7.1 - High - September 08, 2023

An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash.

Memory Corruption

Improper access control in the Insyde software tools may

CVE-2019-12532 7.8 - High - August 26, 2019

Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or information disclosure via local access. This is a software vulnerability, not a firmware issue. Affected tools include: H2OFFT version 3.02~5.28, 100.00.00.00~100.00.08.23 and 200.00.00.01~200.00.00.05, H2OOAE before version 200.00.00.02, H2OSDE before version 200.00.00.07, H2OUVE before version 200.00.02.02, H2OPCM before version 100.00.06.00, H2OELV before version 100.00.02.08.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Insyde H2ouve or by Insyde? Click the Watch button to subscribe.

Insyde
Vendor

Insyde H2offt
Product

subscribe