CVE-2023-39281: Buffer Overflow
Published Nov 1, 2023
·Updated
A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.
Affected Software
305 affected components
All of the following
Any of the following
Intel B760
Intel C262
Intel C266
Intel Core I3-1305u
Intel Core I3-13100
Intel Core I3-13100e
Intel Core I3-13100f
Intel Core I3-13100t
Intel Core I3-13100te
Intel Core I3-1315u
Intel Core I3-1315ue
Intel Core I3-1315ure
Intel Core I3-1320pe
Intel Core I3-1320pre
Intel Core I3-13300he
Intel Core I3-13300hre
Intel Core I5-1334u
Intel Core I5-1335u
Intel Core I5-1335ue
Intel Core I5-13400
Intel Core I5-13400e
Intel Core I5-13400f
Intel Core I5-13400t
Intel Core I5-1340p
Intel Core I5-1340pe
Intel Core I5-13420h
Intel Core I5-13450hx
Intel Core I5-1345u
Intel Core I5-1345ue
Intel Core I5-1345ure
Intel Core I5-13500
Intel Core I5-13500e
Intel Core I5-13500h
Intel Core I5-13500hx
Intel Core I5-13500t
Intel Core I5-13500te
Intel Core I5-13505h
Intel Core I5-1350p
Intel Core I5-1350pe
Intel Core I5-1350pre
Intel Core I5-13600
Intel Core I5-13600h
Intel Core I5-13600he
Intel Core I5-13600hre
Intel Core I5-13600hx
Intel Core I5-13600k
Intel Core I5-13600kf
Intel Core I5-13600t
Intel Core I5 14600k
Intel Core I5 14600kf
Intel Core I7-1355u
Intel Core I7-1360p
Intel Core I7-13620h
Intel Core I7-13650hx
Intel Core I7-1365u
Intel Core I7-1365ue
Intel Core I7-1365ure
Intel Core I7-1366ure
Intel Core I7-13700
Intel Core I7-13700e
Intel Core I7-13700f
Intel Core I7-13700h
Intel Core I7-13700hx
Intel Core I7-13700k
Intel Core I7-13700kf
Intel Core I7-13700t
Intel Core I7-13700te
Intel Core I7-13705h
Intel Core I7-1370p
Intel Core I7-1370pe
Intel Core I7-1370pre
Intel Core I7-1375pre
Intel Core I7-13800h
Intel Core I7-13800he
Intel Core I7-13800hre
Intel Core I7-13850hx
Intel Core I7 14700k
Intel Core I7 14700kf
Intel Core I9-13900
Intel Core I9-13900e
Intel Core I9-13900f
Intel Core I9-13900h
Intel Core I9-13900hk
Intel Core I9-13900hx
Intel Core I9-13900k
Intel Core I9-13900kf
Intel Core I9-13900ks
Intel Core I9-13900t
Intel Core I9-13900te
Intel Core I9-13905h
Intel Core I9-13950hx
Intel Core I9-13980hx
Intel Core I9-14900k
Intel Core I9-14900kf
Intel H770
Intel Hm770
Intel U300
Intel U300e
Intel Wm790
Intel Z790
Insyde InsydeH2O=05.45.24.0039
All of the following
Any of the following
Intel Atom X7211e
Intel Atom X7213e
Intel Atom X7425e
Intel Core I3-n300
Intel Core I3-n305
Intel N100
Intel N200
Intel N50
Intel N95
Intel N97
Insyde InsydeH2O=05.44.45.0017
All of the following
Any of the following
Intel Celeron 7300
Intel Celeron 7305
Intel Celeron G6900
Intel Celeron G6900t
Intel Core I3-12100
Intel Core I3-12100f
Intel Core I3-12100t
Intel Core I3-1210u
Intel Core I3-1215u
Intel Core I3-1220p
Intel Core I3-12300
Intel Core I3-12300t
Intel Core I5-1230u
Intel Core I5-1235u
Intel Core I5-12400
Intel Core I5-12400f
Intel Core I5-12400t
Intel Core I5-1240p
Intel Core I5-1240u
Intel Core I5-12450h
Intel Core I5-12450hx
Intel Core I5-1245u
Intel Core I5-12490f
Intel Core I5-12500
Intel Core I5-12500h
Intel Core I5-12500t
Intel Core I5-1250p
Intel Core I5-12600
Intel Core I5-12600h
Intel Core I5-12600hx
Intel Core I5-12600k
Intel Core I5-12600kf
Intel Core I5-12600t
Intel Core I7-1250u
Intel Core I7-1255u
Intel Core I7-1260p
Intel Core I7-1260u
Intel Core I7-12650h
Intel Core I7-12650hx
Intel Core I7-1265u
Intel Core I7-12700
Intel Core I7-12700f
Intel Core I7-12700h
Intel Core I7-12700k
Intel Core I7-12700kf
Intel Core I7-12700t
Intel Core I7-1270p
Intel Core I7-12800h
Intel Core I7-12800hx
Intel Core I7-1280p
Intel Core I7-12850hx
Intel Core I9-12900
Intel Core I9-12900f
Intel Core I9-12900h
Intel Core I9-12900hk
Intel Core I9-12900hx
Intel Core I9-12900k
Intel Core I9-12900kf
Intel Core I9-12900ks
Intel Core I9-12900t
Intel Core I9-12950hx
Intel Pentium 8500
Intel Pentium 8505
Intel Pentium Gold G7400
Intel Pentium Gold G7400t
Insyde InsydeH2O=05.44.34.0055
All of the following
Any of the following
AMD Ryzen 3 7335u
AMD Ryzen 3 7440u
AMD Ryzen 5 6600h
AMD Ryzen 5 6600hs
AMD Ryzen 5 6600u
AMD Ryzen 5 7535hs
AMD Ryzen 5 7535u
AMD Ryzen 5 7540u
AMD Ryzen 5 7545u
AMD Ryzen 5 7640h
AMD Ryzen 5 7640u
AMD Ryzen 5 Pro 7640hs
AMD Ryzen 7 6800h
AMD Ryzen 7 6800hs
AMD Ryzen 7 6800u
AMD Ryzen 7 7735hs
AMD Ryzen 7 7735u
AMD Ryzen 7 7736u
AMD Ryzen 7 7840h
AMD Ryzen 7 7840u
AMD Ryzen 7 Pro 7840hs
AMD Ryzen 9 6900hs
AMD Ryzen 9 6900hx
AMD Ryzen 9 6980hs
AMD Ryzen 9 6980hx
AMD Ryzen 9 7940h
AMD Ryzen 9 7940hs
AMD Ryzen 9 Pro 7940hs
AMD Ryzen Z1
AMD Ryzen Z1 Extreme
AMD V314
AMD V3c16
AMD V3c18
AMD V3c44
AMD V3c48
Insyde InsydeH2O=05.53.28.0013
All of the following
Any of the following
Intel Celeron 7305l
Intel Core I3-1215ul
Intel Core I3-12300hl
Intel Core I5-1235ul
Intel Core I5-1245ul
Intel Core I5-12500hl
Intel Core I5-12600hl
Intel Core I7-1255ul
Intel Core I7-1265ul
Intel Core I7-12700hl
Intel Core I7-12800hl
Insyde InsydeH2O=05.45.38.0005
All of the following
Any of the following
AMD Ryzen 7 7645hx
AMD Ryzen 7 7745hx
AMD Ryzen 7 7840hx
AMD Ryzen 9 7645hx3d
AMD Ryzen 9 7845hx
AMD Ryzen 9 7940hx
AMD Ryzen 9 7945hx
Insyde InsydeH2O=05.53.23.0011
All of the following
Any of the following
AMD Athlon Gold 7220u
AMD Athlon Silver 7120u
AMD Ryzen 3 7320u
AMD Ryzen 5 7520u
Insyde InsydeH2O=05.53.23.0014
All of the following
Any of the following
AMD Ryzen 5 7500f
AMD Ryzen 5 7600
AMD Ryzen 5 7600x
AMD Ryzen 5 Pro 7645
AMD Ryzen 7 7700
AMD Ryzen 7 7700x
AMD Ryzen 7 7800x3d
AMD Ryzen 7 Pro 7745
AMD Ryzen 9 7900
AMD Ryzen 9 7900x
AMD Ryzen 9 7900x3d
AMD Ryzen 9 7950x
AMD Ryzen 9 7950x3d
AMD Ryzen 9 Pro 7945
Insyde InsydeH2O=05.53.22.0008
All of the following
Insyde InsydeH2O=05.44.30.0022
Any of the following
AMD Ryzen 3 7335u
AMD Ryzen 5 6600h
AMD Ryzen 5 6600hs
AMD Ryzen 5 6600u
AMD Ryzen 5 7535hs
AMD Ryzen 5 7535u
AMD Ryzen 7 6800h
AMD Ryzen 7 6800hs
AMD Ryzen 7 6800u
AMD Ryzen 7 7735hs
AMD Ryzen 7 7735u
AMD Ryzen 7 7736u
AMD Ryzen 9 6900hs
AMD Ryzen 9 6900hx
AMD Ryzen 9 6980hs
AMD Ryzen 9 6980hx
All of the following
Insyde InsydeH2O=05.43.06.0021
AMD Van Gogh 0405
All of the following
Insyde InsydeH2O=05.42.37.0031
Any of the following
AMD Ryzen 3 5100
AMD Ryzen 3 5125c
AMD Ryzen 3 5300g
AMD Ryzen 3 5300ge
AMD Ryzen 3 5400u
AMD Ryzen 3 5425u
AMD Ryzen 3 Pro 7330u
AMD Ryzen 5 5500
AMD Ryzen 5 5500h
AMD Ryzen 5 5500u
AMD Ryzen 5 5560u
AMD Ryzen 5 5600g
AMD Ryzen 5 5600ge
AMD Ryzen 5 5600h
AMD Ryzen 5 5600hs
AMD Ryzen 5 5600u
AMD Ryzen 5 5625u
AMD Ryzen 5 Pro 7530u
AMD Ryzen 7 5700
AMD Ryzen 7 5700g
AMD Ryzen 7 5700ge
AMD Ryzen 7 5700u
AMD Ryzen 7 5800h
AMD Ryzen 7 5800hs
AMD Ryzen 7 5800u
AMD Ryzen 7 5825u
AMD Ryzen 7 Pro 7730u
AMD Ryzen 9 5900hs
AMD Ryzen 9 5900hx
AMD Ryzen 9 5980hs
AMD Ryzen3 5300u
Event History
Nov 1, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-39281?
CVE-2023-39281 is considered a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2023-39281?
To fix CVE-2023-39281, updating the InsydeH2O UEFI BIOS to the latest version that addresses this vulnerability is necessary.
3
What types of systems are affected by CVE-2023-39281?
CVE-2023-39281 affects systems utilizing Intel and AMD processors that run the specified InsydeH2O UEFI BIOS versions.
4
What is the impact of exploiting CVE-2023-39281?
Exploitation of CVE-2023-39281 can lead to unauthorized access, allowing attackers to execute arbitrary code during the DXE phase.
5
When was CVE-2023-39281 disclosed?
CVE-2023-39281 was disclosed in 2023 and is part of ongoing efforts to enhance cybersecurity in firmware.