InsydeH2O Drivers Buffer Overflow Vulnerability in egwindrvx64.sys

A buffer overflow vulnerability has been identified in the InsydeH2O driver egwindrvx64.sys. This vulnerability arises because the driver uses the RTL_QUERY_REGISTRY_DIRECT flag to read a registry value, which an untrusted user-mode application could potentially exploit to cause a buffer overflow.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, allowing for out-of-bounds write conditions that could be exploited to execute arbitrary code or cause a denial-of-service.

Remediation

Users are advised to update to version 200.02.01.00 or newer. Instructions for downloading the updated version can be found on the Insyde Software website.