CVE-2025-12050
Buffer Overflow in Tool Package Drivers via Registry Query Flag
Publication date: 2026-01-14
Last updated on: 2026-01-14
Assigner: Insyde
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| insyde | h2offt | 6.76.00 |
| insyde | h2offt | 200.02.01.00 |
| insyde | h2ouvez | 200.02.01.00 |
| insyde | h2osde | 200.02.01.00 |
| insyde | h2orte | 200.02.01.00 |
| insyde | h2ooae | 200.02.01.00 |
| insyde | h2opcm | 200.02.01.00 |
| insyde | h2oelv | 200.02.01.00 |
| insyde | h2ouve_arm | 200.02.01.00 |
| insyde | h2osde_arm | 200.02.01.00 |
| insyde | h2orte_arm | 200.02.01.00 |
| hp | flashwin | 6.51.00 |
| hp | readback_tool | 1.2.4.0 |
| hp | flashverifyutility | 6.2.5.0 |
| hp | issecurebootkeyinstaller | 1.2.0.2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-12050 is a buffer overflow vulnerability found in certain InsydeH2O tool drivers that use the RTL_QUERY_REGISTRY_DIRECT flag to read registry values. This insecure method allows untrusted user-mode applications to cause a buffer overflow, potentially leading to memory corruption. The affected drivers include H2OFFT32.sys and others. The vulnerability is classified as an out-of-bounds write (CWE-787) and has a high severity score. [1]
How can this vulnerability impact me? :
This vulnerability can allow a local attacker with low privileges to exploit the buffer overflow to compromise the confidentiality, integrity, and availability of the affected system. Because the drivers read registry values insecurely, an untrusted application could cause memory corruption, potentially leading to system crashes, data corruption, or escalation of privileges. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the affected tools and drivers to the fixed versions provided by the vendor. Specifically, update H2OFFT (mobile) to version 6.76.00 or newer, H2OFFT (server/embedded) to version 200.02.01.00 or newer, and other affected Insyde tools such as H2OUVE, H2OSDE, H2ORTE, H2OOAE, H2OPCM, H2OELV, H2OUVE_ARM, H2OSDE_ARM, H2ORTE_ARM to version 200.02.01.00 or newer. Also update OEM tools like HP FlashWin to 6.51.00, HP Readback tool to 1.2.4.0, HP FlashVerifyUtility to 6.2.5.0, and HP IsSecureBootKeyInstaller to 1.2.0.2. These updates address the buffer overflow vulnerability caused by insecure registry value reading. [1]