Local Privilege Escalation Vulnerability in Gigabyte Software SMI Handler

CVE-2025-7029

What is CVE-2025-7029?

A vulnerability in Gigabyte's Software SMI handler allows local attackers to manipulate the RBX register, which is critical for accessing pointers utilized in power and thermal configuration logic. This exploitation occurs due to insufficient validation of buffers before executing structured memory writes, making it possible for attackers to corrupt SMRAM. The flaw could potentially lead to unauthorized privilege escalation within the System Management Mode (SMM), compromising overall system security.

References