CVE-2025-7026
SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0
A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2DB$'), the function performs arbitrary writes to System Management RAM (SMRAM), leading to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise.
Reserved 2025-07-02 | Published 2025-07-11 | Updated 2025-07-12 | Assigner certccCWE-822 Untrusted Pointer Dereference
www.gigabyte.com/Support/Security
www.binarly.io/advisories/brly-dva-2025-008
Support options
