Read the docs
TI-2025-03946 Aliases CVE-2025-4426GHSA-g6vv-g2rm-qrv7

SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module

Priority LOW 26CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00223 13th percentileScored 2026-11-07
Fix Fixed InsydeH2O (Insyde Software): L05.05.40.011803.172079

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Insyde SoftwareInsydeH2OFeature developed for Lenovo to before L05.05.40.011803.172079L05.05.40.011803.172079Patch availableCNA
  • InsydeH2O VendorInsyde Software Affected Feature developed for Lenovo to before L05.05.40.011803.172079 Fixed in L05.05.40.011803.172079 Patch available CNA

Remediation

  • Fix · CNA InsydeH2O (Insyde Software) Fixed in L05.05.40.011803.172079

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Insyde Software InsydeH2O L05.05.40.011803.172079

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-03945 SetupAutomationSmm: Stack overflow vulnerability in SMI handlerPriority LOW 37
    • TI-2025-03943 SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruptionPriority LOW 37
    • TI-2025-03942 EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM modulePriority LOW 37
    Show all 6 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-4426
  2. 2026-10-03 Alias added: GHSA-g6vv-g2rm-qrv7

References

Other 2

  • TI-2023-08797 An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. CVSS 3.1HIGH 8.8
  • TI-2022-16772 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. CVSS 3.1HIGH 8.2
  • TI-2022-16681 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. CVSS 3.1HIGH 8.2
  • TI-2022-16323 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. CVSS 3.1HIGH 8.2
  • TI-2022-15984 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. CVSS 3.1HIGH 8.2
  • TI-2023-08799 An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. CVSS 3.1HIGH 7.8
See all 126 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences