PT-2026-2437 · Insyde · Insydeh2O Tools

Published 2026-01-14 · Updated 2026-01-14 · CVE-2025-12050

NVD

CVSS v3.1

7.8

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The drivers in the tool packages use RTL QUERY REGISTRY DIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-12050

Affected Products

Insydeh2O Tools

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-12050 · Security Note
• https://insyde.com/security-pledge/sa-2025010 · Note