News · via CERT/CC
VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
Overview An Out-of-bounds Write vulnerability in the InsydeH2O IHISI software used by HP PC BIOS can allow a local attacker with OS kernel privileges to perform arbitrary physical memory writes…