GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & CVE-2025-7026/7027/7028/7029 Research Static reverse-engineering of a GIGABYTE H510M K V2 H510MKV2.F3 BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core memory allocator and a targeted hunt for the four SMM...

ShadeBIOS

Shade BIOS README is present in each Pkg folder ModuleLoaderPkg: DXE module that loads & executes DXE modules from a USB stick ShadeBiosPkg: Main Shade BIOS package VarPrintPkg: Library that allows printing debug messages or statuses to the UEFI variables Author Kazuki Matsuo. © FFRI Security, In...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

SmmExploit

SmmExploit This is a report and an exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303. The issue was fixed in the version 304. Issue Description Summary UX360CA BIOS version 303 has 3 vulnerable modules that allow an attacker wit...

bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast...

CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

CVE-2017-2751

You'll find the .tex and .pdf file for CVE-2017-2751, a BIOS/EFI password extraction for consumer HP laptops...

BIOS-stuff-related-programming

BIOS-stuff-related-programming Final OBJECTIVE:BIOS ROOTKIT AND RSHELL USING BIOS NETWORKING STACK...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...

gvcidrv64

hi hackers. GVCIDrv64.sys is the signed kernel driver that ships with Gigabyte's BIOS utility. It creates \.\GVCIDrv64 with no security descriptor, so any local user can open it no admin, no UAC. It exposes 3 IOCTLs with zero access control: map 32 MB of physical memory 0x9C406580, unmap...

CVE-2025-58771

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and...

CVE-2025-58772

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2025-58773

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2026-0893

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...

CVE-2025-58774

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

CVE-2026-0893

The AMI APTIOV BIOS contains a vulnerability where an attacker with local access can cause Exposure of Sensitive Information to an Unauthorized Actor . Successful exploitation may lead to information disclosure , privilege escalation , and further impacts on the Confidentiality, Integrity, and Av...

CVE-2025-58774

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger a “Buffer Access with Incorrect Length Value” (CWE-805). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and ...

CVE-2025-58774 UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

CVE-2025-58773

The AMI APTIOV BIOS contains an Out-of-bounds Write vulnerability (CWE-787) reachable via local access. Successful exploitation can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and Availability of the system....

CVE-2025-58772

The AMI APTIOV BIOS contains vulnerabilities that allow local users to trigger a "Classic Buffer Overflow" (CWE-120). Successful exploitation of this flaw can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's Confidentiality, Integr...