CVE-2020-27339

MediumCVSS 6.7/10Last modified Aug 11, 2026

Description

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 16, 2021
Last modified: Aug 11, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-27342.4Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c a CVE-2020-273406.1The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malic CVE-2020-273446.1The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.CVE-2020-273477.8In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be CVE-2020-273486.8In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain c CVE-2020-273495.5Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions pri CVE-2020-27358.0Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c CVE-2020-273505.7APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extr CVE-2020-273512.8Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-17 CVE-2020-273528.8When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result s CVE-2020-273565.4The debug-meta-data plugin 1.1.2 for WordPress allows XSS.CVE-2020-273584.3An issue was discovered in REDCap 8.11.6 through 9.x before 10. The messenger's CSV feature (that allows users to export their conversation