Login Request a demo
Medium severity · published Dec 7, 2023
CVE-2023-40238
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before…
5.5
CVSS
1.8%
EPSS
No
On KEV
Description
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Esprimo D556/2 Firmware · Fujitsu
before 1.35.0 · source: NVD
ED
Esprimo D6011 Firmware · Fujitsu
before 1.31.0 · source: NVD
ED
Esprimo D6012 Firmware · Fujitsu
before 3.08.0 · source: NVD
ED
Esprimo D7010 Firmware · Fujitsu
before 1.64.0 · source: NVD
ED
Esprimo D7010/8 Firmware · Fujitsu
before 1.64.0 · source: NVD
ED
Esprimo D7011 Firmware · Fujitsu
before 1.31.0 · source: NVD
ED
Esprimo D7012 Firmware · Fujitsu
before 3.08.0 · source: NVD
ED
Esprimo D7013 Firmware · Fujitsu
before 3.08.0 · source: NVD
ED
Esprimo D738 Firmware · Fujitsu
before 1.38.0 · source: NVD
ED
Esprimo D757 Firmware · Fujitsu
before 1.35.0 · source: NVD
ED
Esprimo D9010 Firmware · Fujitsu
before 1.64.0 · source: NVD
ED
Esprimo D9011 Firmware · Fujitsu
before 1.31.0 · source: NVD
Affected product
ED
Esprimo D556/2 Firmware
Fujitsu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-40238
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-40238
Exploit
https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/index.html
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240105-0002/
Vendor Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2023053
Third Party Advisory
https://www.kb.cert.org/vuls/id/811862