CVE-2025-7028 SMM Arbitrary Memory Access via Flash Handler with Unchecked FuncBlock Pointer

A vulnerability in the Software SMI handler SwSmiInputValue 0x20 allows a local attacker to supply a crafted pointer FuncBlock through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo that...

CVE-2025-7028

A vulnerability exists in the Software SMI handler (SwSmiInputValue 0x20) of GIGABYTE motherboard microprogramming software, specifically involving the FuncBlock pointer. A local attacker can supply crafted pointers via RBX and RCX register values, which are passed unchecked into flash management...