CVE-2025-12052

egwindrv.sys is potentially vulnerable to a buffer overflow. PUBLISHED

Description (CNA)

The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.

Affected (CNA)

Vendor / product	Versions
Insyde Software / InsydeH2O tools	affected See in the Solution

CWE

CWE-787

References

https://www.insyde.com/security-pledge/sa-2025010/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.