CVE-2021-33834: Insyde h2offt
High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash.
Affected products
Published 2023-09-08. Last modified 2026-06-17.