7Ara
CVE-2023-40238 | Insyde InsydeH2O BmpDecoderDxe PixelHeight/PixelWidth memory corruption
A vulnerability classified as critical was found in Insyde InsydeH2O. Affected by this vulnerability is an unknown functionality of the component BmpDecoderDxe. The manipulation of the argument PixelHeight/PixelWidth leads to memory corruption. This vulnerability is known as CVE-2023-40238. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.