A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.
PoC: hydrophobia-scanner
Read-only defender scanner for CVE-2025-4275 (Hydroph0bia) on Insyde H2O firmware. Companion to Insyde SA-2025002 / CERT/CC VU#211341.
PoC: CVE-2025-4275
Analysis and exploitation of CVE-2025-4275 (Hydr0ph0bia), a Secure Boot trust-chain weakness where firmware variables are used to introduce attacker-controlled certificates trusted by subsequent boot components.
PoC: Hydroph0bia
Binaries, drivers, PoCs and other stuff on Hydroph0bia vulnerability (CVE-2025-4275)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free