CVE-2025-10451

HighCVSS 8.2/10Last modified Oct 7, 2026

Description

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
Insyde SoftwareInsydeH2OHP feature version before 20C1

References

Timeline

Published
Dec 12, 2025
Last modified
Oct 7, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-104529.8Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to readCVE-2025-104535.3O'View MapServer developed by PilotGaea Technologies has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackCVE-2025-104566.5A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker CVE-2025-104578.1The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device haCVE-2025-104587.6Parameters are not validated or sanitized, and are later used in various internal operations.CVE-2025-104599.8A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/all-CVE-2025-10467.8Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arCVE-2025-104609.4A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendorCVE-2025-104615.3Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules)CVE-2025-104637.3Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Authentication Abuse. CVE-2025-104646.5Insecure Storage of Sensitive Information vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows RetrCVE-2025-104658.8Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allow
CVE-2025-10451: High severity, CVSS 8.2 | Vulnix