GeezerVison is showing www.insyde.com — Security Pledge
Insyde's Security Pledge
Recent Security Advisories
We support you, our customers and partners, in closing the door to anything which compromises the security or privacy in your platforms.
Since our inception 20 years ago, security has been essential. Hundreds of OEMs and ODM partners have trusted us with enabling the platforms that form the foundation of their products, knowing we share their commitment to make them secure. Product security is a top priority and one that we continue to improve upon continuously.
- We sit on the security review team of the industry’s leading firmware standards body; the UEFI Security Response Team.
- We have internal product security experts that drive our Security Development Lifecycle (SDL) process within our BIOS and BMC firmware teams and evaluate existing and emerging threats.
- We issue regular and timely security alert bulletins when mitigations to vulnerabilities are discovered.
- We work closely with all of our silicon vendor partners to ensure the timely and critical delivery of microcode updates and other patches.
At Insyde, we work with the broader industry to identify, report, mitigate and disclose security vulnerabilities. We support you, our customers and partners, in closing the door to anything which compromises the security or privacy in your platforms. We take this role seriously, because if your firmware is not secure, your product is not secure.
This is our pledge to you. If you have any questions about Insyde Software’s commitment to security, I urge you to reach out to us at [email protected]
If you have an Insyde security issue to report, please click on the link below.
Report an IssueSecurity Advisories
BIOS
September 8, 2026 : SA-2026009
Link
| Summary
| CVSS Score
|
|---|
| INSYDE-SA-2026009 | H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.
| 8.2 |
September 8, 2026 : SA-2026008
Link
| Summary
| CVSS Score
|
|---|
| INSYDE-SA-2026008 | Code change to accommodate OpenSSL 3.0.21
| See in description |
September 8, 2026 : SA-2026004
Link
| Summary
| CVSS Score
|
|---|
| INSYDE-SA-2026004 | UEFI BIOS embedded Shell can be used to bypass Secure Boot
| 8.2 |
August 26, 2026 : SA-2026006
Link
| Summary
| CVSS Score
|
|---|
| INSYDE-SA-2026006 | FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow
| 2.7 |
August 18, 2026 : SA-2026005
BMC
February 11, 2025 : SA-2024017
October 8, 2024 : SA-2024011
October 8, 2024 : SA-2024010
September 10, 2024 : SA-2024009
September 5, 2024 : SA-2024005