[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDzabYm2LfqVCk127EGK_ZdLHJiauFMFumGuyBz_q3wY":3,"g5a-risk:CVE-2021-33834":105},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":42,"references":43,"referencesCount":42,"weaknesses":53,"weaknessesCount":62,"isActivelyExploited":63,"cisaInfo":26,"otxData":26,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":100,"notableEvents":101},"CVE-2021-33834","What is CVE-2021-33834?","An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash.","An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memor...","2023-09-08T02:15:07.503","2023-09-13T02:12:12.1",7.1,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.2,0.00189,[29,29,29,29,29,29,29],"High",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"insyde","h2offt","6.20.00","cpe:2.3:a:insyde:h2offt:6.20.00:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":40,"criteria":41,"vulnerable":4},"iscflashx64.sys","3.9.3.0","cpe:2.3:a:insyde:iscflashx64.sys:3.9.3.0:*:*:*:*:*:*:*",2,[44,49],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge","Insyde",[48],"Not Applicable",{"url":50,"source":46,"tags":51},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2021004",[52],"Vendor Advisory",[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2021-33834? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-33834, a high severity cyber security vulnerability from 2023. An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyd...","CVE-2021-33834, CVE-2021-33834 vulnerability, CVE-2021-33834 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, insyde security, h2offt vulnerability, iscflashx64.sys vulnerability","\u002Fwhat-is\u002Fcve-2021-33834",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":10,"dateModified":11,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-33834","Cybersecurity","CVE-2021-33834, CVE-2021-33834 vulnerability, CVE-2021-33834 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":26,"Negate":26,"Nodes":92},[93],{"Operator":94,"Negate":26,"CPEMatch":95},"OR",[96,98],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":97,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F6D12E08-642C-4101-AEE5-08891977CE27",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"043174B7-0F25-47D3-807F-21D76356B83D",[],[],{"lastModified":11,"cacheTime":103,"version":104},1792260264091,"2.0",{"score":106,"band":107,"action":108,"scoredAt":109},46,"Medium","Plan remediation","2026-10-16T06:59:02.576843+00:00"]