CVE-2025-4410

SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution. PUBLISHED

Description (CNA)

A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitrary code.

Affected (CNA)

Vendor / product	Versions
Insyde Software / InsydeH2O	affected See in the Reference link

CWE

CWE-20

References

https://www.insyde.com/security-pledge/sa-2025005/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.