Vulnerability · Published Jun 11, 2025 · Assigned by Insyde
CVE-2025-4275SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
High 7.8
In plain English
A high-severity security flaw in InsydeH2O from Insyde Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.5%top 58.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Insyde Software | InsydeH2O | Kernel 5.2 – before 05.2A.16Kernel 5.3 – before 05.39.16Kernel 5.4 – before 05.47.16Kernel 5.5 – before 05.55.16Kernel 5.6 – before 05.62.16Kernel 5.7 – before 05.71.16 |