The vulnerability of the SwSmiInputValue() function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, allows attackers to circumvent security restrictions, gain elevated privileges, and execute arbitrary code.

The vulnerability of the SwSmiInputValue function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to bypass security restrictions, gain elevated...

The vulnerability of the SwSmiInputValue() function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, allows attackers to circumvent security restrictions, gain elevated privileges, and execute arbitrary code.

The vulnerability of the SwSmiInputValue function, a handler for System Management Interrupts in Gigabyte’s microprogramming motherboard software, is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to bypass security restrictions, gain elevated...

SMM callout vulnerabilities identified in Gigabyte UEFI firmware modules

Overview System Management Mode SMM callout vulnerabilities have been identified in UEFI modules present in Gigabyte firmware. An attacker could exploit one or more of these vulnerabilities to elevate privileges and execute arbitrary code in the SMM environment of a UEFI-supported processor. Whil...

Critical Firmware Vulnerability in Gigabyte Systems Exposes ~7 Million Devices

Cybersecurity researchers have found "backdoor-like behavior" within Gigabyte systems, which they say enables the UEFI firmware of the devices to drop a Windows executable and retrieve updates in an unsecure format. Firmware security firm Eclypsium said it first detected the anomaly in April 2023...