Arbitrary Memory Write Vulnerability in Gigabyte Firmware

CVE-2025-7027

What is CVE-2025-7027?

A vulnerability exists in the Software SMI handler that allows a local attacker to manipulate read and write addresses via the CommandRcx1 function. This vulnerability arises from an unvalidated UEFI NVRAM variable, leading to potential arbitrary memory writes within System Management RAM (SMRAM). By leveraging an attacker-controlled pointer and exploiting dual-pointer dereference, this flaw can facilitate SMM privilege escalation and compromise of the firmware, posing significant security risks.

References