InsydeH2O Drivers Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the InsydeH2O tool packages. The issue arises because the drivers use the RTL_QUERY_REGISTRY_DIRECT flag to read a registry value, which an untrusted user-mode application may exploit to cause a buffer overflow. This vulnerability affects several drivers, including H2OFFT32.sys, H2OFFT64.sys, egwindrv.sys, and egwindrvx64.sys.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, allowing for potential arbitrary code execution or causing a system crash.

Remediation

Users are advised to update to version 6.76.00 for the mobile version of H2OFFT, version 200.02.01.00 for the server/embedded version of H2OFFT, or version 200.02.01.00 for H2OUVE, H2OSDE, H2ORTE, H2OOAE, H2OPCM, H2OELV, H2OUVE_ARM, H2OSDE_ARM, H2ORTE_ARM, or to the latest version of the OEM tools HP FlashWin, HP Readback tool, HP FlashVerifyUtility, or HP IsSecureBootKeyInstaller.