high7.1
CVE-2021-33834
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00.
Impact
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Insyde | H2offt | Version 6.20.00 |
| Insyde | Iscflashx64.Sys | Version 3.9.3.0 |