CVE-2025-4423 — SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption

CVE-2025-4423

SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption PUBLISHED

Description (CNA)

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

Affected (CNA)

Vendor / product	Versions
Insyde Software / InsydeH2O	affected Feature developed for Lenovo before L05.05.40.011803.172079

CWE

CWE-119

References

https://www.insyde.com/security-pledge/sa-2025007/
https://support.lenovo.com/us/en/product_security/home

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.