Researchers from firmware protection company Binarly have discovered critical vulnerabilities in the InsydeH2O UEFI firmware from multiple computer vendors. Most of the flaws are in the software’s System Management Mode (SMM) that provides system-wide functions such as power management and hardware control. Ten of the discovered vulnerabilities could be exploited for privilege escalation, twelve memory corruption flaws in SMM, and one is a memory corruption vulnerability. The U.S. CERT Coordination Center confirmed three vendors with products affected by the security issues.”]