Maple Labs

CVE search · CVE-2023-40238

CVE-2023-40238

medium 5.5

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-312

Severity

VersionScoreVectorSource
CVSS 3.1 medium 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H nvd@nist.govPrimary
CVSS 3.1 medium 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • fujitsu · esprimo_d556/2_firmware
  • fujitsu · esprimo_d6011_firmware
  • fujitsu · esprimo_d6012_firmware
  • fujitsu · esprimo_d7010_firmware
  • fujitsu · esprimo_d7010/8_firmware
  • fujitsu · esprimo_d7011_firmware
  • fujitsu · esprimo_d7012_firmware
  • fujitsu · esprimo_d7013_firmware
  • fujitsu · esprimo_d738_firmware
  • fujitsu · esprimo_d757_firmware
  • fujitsu · esprimo_d9010_firmware
  • fujitsu · esprimo_d9011_firmware
  • fujitsu · esprimo_d9012_firmware
  • fujitsu · esprimo_d9013_firmware
  • fujitsu · esprimo_d957_firmware
  • fujitsu · esprimo_d957/e9x+_firmware
  • fujitsu · esprimo_d958_firmware
  • fujitsu · esprimo_g5010_firmware
  • fujitsu · esprimo_g5011_firmware
  • fujitsu · esprimo_g558_firmware
  • fujitsu · esprimo_g6012_firmware
  • fujitsu · esprimo_g9010_firmware
  • fujitsu · esprimo_g9012_firmware
  • fujitsu · esprimo_g9013_firmware
  • fujitsu · esprimo_k5010/24_firmware
  • fujitsu · esprimo_k557/24_firmware
  • fujitsu · esprimo_k558/24_firmware
  • fujitsu · esprimo_p5010_firmware
  • fujitsu · esprimo_p5011_firmware
  • fujitsu · esprimo_p557_firmware
  • fujitsu · esprimo_p558/power_firmware
  • fujitsu · esprimo_p6012_firmware
  • fujitsu · esprimo_p7010_firmware
  • fujitsu · esprimo_p7011_firmware
  • fujitsu · esprimo_p7012_firmware
  • fujitsu · esprimo_p7013_firmware
  • fujitsu · esprimo_p757_firmware
  • fujitsu · esprimo_p758_firmware
  • fujitsu · esprimo_p9010_firmware
  • fujitsu · esprimo_p9011_firmware
  • fujitsu · esprimo_p9012_firmware
  • fujitsu · esprimo_p9013_firmware
  • fujitsu · esprimo_p957_firmware
  • fujitsu · lifebook_u9313x_firmware
  • fujitsu · lifebook_u939_firmware
  • fujitsu · lifebook_u939x_firmware
  • fujitsu · lifebook_u9413_firmware
  • fujitsu · stylistic_q5010_firmware
  • fujitsu · stylistic_q509_firmware
  • fujitsu · stylistic_q7310_firmware
  • fujitsu · stylistic_q7311_firmware
  • fujitsu · stylistic_q7312_firmware
  • fujitsu · stylistic_q739_firmware
  • fujitsu · primequest_3800b_firmware
  • fujitsu · primequest_3800b2_firmware
  • fujitsu · primequest_3800e_firmware
  • fujitsu · primequest_3800e2_firmware
  • fujitsu · primequest_4400e_firmware
  • fujitsu · primergy_bx2560_m2_firmware
  • fujitsu · primergy_bx2580_m2_firmware
  • fujitsu · primergy_cx2550_m4_firmware
  • fujitsu · primergy_cx2550_m5_firmware
  • fujitsu · primergy_cx2550_m6_firmware
  • fujitsu · primergy_cx2550_m7_firmware
  • fujitsu · primergy_cx2560_m4_firmware
  • fujitsu · primergy_cx2560_m5_firmware
  • fujitsu · primergy_cx2560_m6_firmware
  • fujitsu · primergy_cx2560_m7_firmware
  • fujitsu · primergy_cx2570_m4_firmware
  • fujitsu · primergy_cx2570_m5_firmware
  • fujitsu · primergy_gx2460_m1_firmware
  • fujitsu · primergy_gx2560_m7_firmware
  • fujitsu · primergy_gx2570_m6_firmware
  • fujitsu · primergy_rx1330_m3_firmware
  • fujitsu · primergy_rx1330_m4_firmware
  • fujitsu · primergy_rx1330_m5_firmware
  • fujitsu · primergy_rx1440_m2_firmware
  • fujitsu · primergy_rx2450_m1_firmware
  • fujitsu · primergy_rx2450_m2_firmware
  • fujitsu · primergy_rx2520_m4_firmware
  • fujitsu · primergy_rx2520_m5_firmware
  • fujitsu · primergy_rx2530_m4_firmware
  • fujitsu · primergy_rx2530_m5_firmware
  • fujitsu · esprimo_p958_firmware
  • fujitsu · esprimo_p958/power_firmware
  • fujitsu · esprimo_p9910_firmware
  • fujitsu · esprimo_q556/2_firmware
  • fujitsu · esprimo_q556/2/d_firmware
  • fujitsu · esprimo_q558_firmware
  • fujitsu · esprimo_q7010_firmware
  • fujitsu · esprimo_q957/mre_firmware
  • fujitsu · esprimo_q957_firmware
  • fujitsu · esprimo_q958_firmware
  • fujitsu · esprimo_q958/mre_firmware
  • fujitsu · celsius_c780_firmware
  • fujitsu · celsius_j5010_firmware
  • fujitsu · celsius_j550/2_firmware
  • fujitsu · celsius_j580_firmware
  • fujitsu · celsius_m7010_firmware
  • fujitsu · celsius_m7010power_firmware
  • fujitsu · celsius_m7010x_firmware
  • fujitsu · celsius_m7010xpower_firmware
  • fujitsu · celsius_r970_firmware
  • fujitsu · celsius_r970b_firmware
  • fujitsu · celsius_r970bpower_firmware
  • fujitsu · celsius_w5010_firmware
  • fujitsu · celsius_w5010/l_firmware
  • fujitsu · celsius_w5011_firmware
  • fujitsu · celsius_w5012_firmware
  • fujitsu · celsius_w5012-ll_firmware
  • fujitsu · celsius_w570_firmware
  • fujitsu · celsius_w570power_firmware
  • fujitsu · celsius_w570power+_firmware
  • fujitsu · celsius_w580_firmware
  • fujitsu · celsius_w580power_firmware
  • fujitsu · celsius_w580power+_firmware
  • fujitsu · celsius_h5511_firmware
  • fujitsu · celsius_h7510_firmware
  • fujitsu · celsius_h7613_firmware
  • fujitsu · celsius_h780_firmware
  • fujitsu · celsius_h980_firmware
  • fujitsu · lifebook_a3510_firmware
  • fujitsu · lifebook_a3511_firmware
  • fujitsu · primergy_rx2530_m6_firmware
  • fujitsu · primergy_rx2530_m7_firmware
  • fujitsu · primergy_rx2540_m4_firmware
  • fujitsu · primergy_rx2540_m5_firmware
  • fujitsu · primergy_rx2540_m6_firmware
  • fujitsu · primergy_rx2540_m7_firmware
  • fujitsu · primergy_rx4770_m3_firmware
  • fujitsu · primergy_rx4770_m4_firmware
  • fujitsu · primergy_rx4770_m5_firmware
  • fujitsu · primergy_rx4770_m6_firmware
  • fujitsu · primergy_rx4770_m7_firmware
  • fujitsu · primergy_rx8770_m7_firmware
  • fujitsu · primergy_tx1310_m3_firmware
  • fujitsu · primergy_tx1310_m5_firmware
  • fujitsu · primergy_tx1320_m3_firmware
  • fujitsu · primergy_tx1320_m4_firmware
  • fujitsu · primergy_tx1320_m5_firmware
  • fujitsu · primergy_tx1330_m3_firmware
  • fujitsu · primergy_tx1330_m4_firmware
  • fujitsu · primergy_tx1330_m5_firmware
  • fujitsu · primergy_tx2550_m4_firmware
  • fujitsu · primergy_tx2550_m5_firmware
  • fujitsu · primergy_tx2550_m7_firmware
  • fujitsu · lifebook_e4411_firmware
  • fujitsu · lifebook_e4511_firmware
  • fujitsu · lifebook_e5410_firmware
  • fujitsu · lifebook_e5411_firmware
  • fujitsu · lifebook_e5412_firmware
  • fujitsu · lifebook_e5412/mtc_firmware
  • fujitsu · lifebook_e5413_firmware
  • fujitsu · lifebook_e549_firmware
  • fujitsu · lifebook_e5510_firmware
  • fujitsu · lifebook_e5511_firmware
  • fujitsu · lifebook_e5512_firmware
  • fujitsu · lifebook_e5513_firmware
  • fujitsu · lifebook_e559_firmware
  • fujitsu · lifebook_e736_firmware
  • fujitsu · lifebook_e736_vpro_firmware
  • fujitsu · lifebook_e746_firmware
  • fujitsu · lifebook_e746_vpro_firmware
  • fujitsu · lifebook_t939_firmware
  • fujitsu · lifebook_u5313x_firmware
  • fujitsu · lifebook_u729_firmware
  • fujitsu · lifebook_u729x_firmware
  • fujitsu · lifebook_u7310_firmware
  • fujitsu · lifebook_u7311_firmware
  • fujitsu · lifebook_u7312_firmware
  • fujitsu · lifebook_u7313_firmware
  • fujitsu · lifebook_u7410_firmware
  • fujitsu · lifebook_u7411_firmware
  • fujitsu · lifebook_u7412_firmware
  • fujitsu · lifebook_u7413_firmware
  • fujitsu · lifebook_u749_firmware
  • fujitsu · lifebook_u7510_firmware
  • fujitsu · lifebook_u7511_firmware
  • fujitsu · lifebook_u7512_firmware
  • fujitsu · lifebook_u759_firmware
  • fujitsu · lifebook_u7613_firmware
  • fujitsu · lifebook_u9310_firmware
  • fujitsu · lifebook_u9310x_firmware
  • fujitsu · lifebook_u9311_firmware
  • fujitsu · lifebook_u9312_firmware
  • fujitsu · lifebook_u9312x_firmware
  • insyde · insydeh2o

References