CVE-2023-40238

· MEDIUMModified

← All CVEs

CVSS v3.1

5.5

EPSS

1.86%

Published

Dec 7, 2023

Modified

Feb 25, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-312CWE-312

Affected Products (377)

fujitsu · esprimo_d556\/2_firmware (up to 1.35.0)vulnerable

fujitsu · esprimo_d556\/2

fujitsu · esprimo_d6011_firmware (up to 1.31.0)vulnerable

fujitsu · esprimo_d6011

fujitsu · esprimo_d6012_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_d6012

fujitsu · esprimo_d7010_firmware (up to 1.64.0)vulnerable

fujitsu · esprimo_d7010

fujitsu · esprimo_d7010\/8_firmware (up to 1.64.0)vulnerable

fujitsu · esprimo_d7010\/8

fujitsu · esprimo_d7011_firmware (up to 1.31.0)vulnerable

fujitsu · esprimo_d7011

fujitsu · esprimo_d7012_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_d7012

fujitsu · esprimo_d7013_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_d7013

fujitsu · esprimo_d738_firmware (up to 1.38.0)vulnerable

fujitsu · esprimo_d738

fujitsu · esprimo_d757_firmware (up to 1.35.0)vulnerable

fujitsu · esprimo_d757

fujitsu · esprimo_d9010_firmware (up to 1.64.0)vulnerable

fujitsu · esprimo_d9010

fujitsu · esprimo_d9011_firmware (up to 1.31.0)vulnerable

fujitsu · esprimo_d9011

fujitsu · esprimo_d9012_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_d9012

fujitsu · esprimo_d9013_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_d9013

fujitsu · esprimo_d957_firmware (up to 1.35.0)vulnerable

fujitsu · esprimo_d957

fujitsu · esprimo_d957\/e9x\+_firmware (up to 1.35.0)vulnerable

fujitsu · esprimo_d957\/e9x\+

fujitsu · esprimo_d958_firmware (up to 1.38.0)vulnerable

fujitsu · esprimo_d958

fujitsu · esprimo_g5010_firmware (up to 1.45.0)vulnerable

fujitsu · esprimo_g5010

fujitsu · esprimo_g5011_firmware (up to 1.27.0)vulnerable

fujitsu · esprimo_g5011

fujitsu · esprimo_g558_firmware (up to 1.38.0)vulnerable

fujitsu · esprimo_g558

fujitsu · esprimo_g6012_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_g6012

fujitsu · esprimo_g9010_firmware (up to 1.45.0)vulnerable

fujitsu · esprimo_g9010

fujitsu · esprimo_g9012_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_g9012

fujitsu · esprimo_g9013_firmware (up to 3.08.0)vulnerable

fujitsu · esprimo_g9013

fujitsu · esprimo_k5010\/24_firmware (up to 1.64.0)vulnerable

fujitsu · esprimo_k5010\/24

...and 327 more

References (10)

https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/index.html

Exploit

https://security.netapp.com/advisory/ntap-20240105-0002/

Third Party Advisory

https://www.insyde.com/security-pledge

Vendor Advisory

https://www.insyde.com/security-pledge/SA-2023053

Vendor Advisory

https://www.kb.cert.org/vuls/id/811862

Third Party Advisory

https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/index.html

Exploit

https://security.netapp.com/advisory/ntap-20240105-0002/

Third Party Advisory

https://www.insyde.com/security-pledge

Vendor Advisory

https://www.insyde.com/security-pledge/SA-2023053

Vendor Advisory

https://www.kb.cert.org/vuls/id/811862

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs