CVE-2021-45970 - CVE House
Back to Database
Status published High CVE-2021-45970

An issue was discovered in IdeBusDxe in Insyde InsydeH2O with...

Vulnerability Description

An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45970

Credits & Attribution

No credits recorded in the NVD database.

References

More from insyde

View All →
CVE-2022-46897
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36448
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36338
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36337
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-35897
An stack buffer overflow vulnerability leads to arbitrary code execution...
Unknown 0

Affected Vendor

Affected Software

insydeh2o
Vulnerable Versions:
5.1, 5.2, 5.3, 5.4, 5.5

Timeline

Official Publish: January 5th, 2022
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.