https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:53:13.165296+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09302 bdu:2025-09302 2026-10-02T23:53:13.224623+00:00 bdu:2025-09302 https://cve.radiocsirt.org/vuln/euvd-2026-257997 EUVD-2026-257997 2026-10-02T23:53:13.224658+00:00 EUVD-2026-257997 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7028 fkie_cve-2025-7028 2026-10-02T23:53:13.224672+00:00

A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (FuncBlock) through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions (ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo) that dereference both the structure and its nested members, such as BufAddr. This enables arbitrary read/write access to System Management RAM (SMRAM), allowing an attacker to corrupt firmware memory, exfiltrate SMRAM content via flash, or install persistent implants.

 https://cve.radiocsirt.org/vuln/ghsa-g4hc-h3h3-22rv GHSA-g4hc-h3h3-22rv 2026-10-02T23:53:13.224703+00:00

A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (FuncBlock) through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions (ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo) that dereference both the structure and its nested members, such as BufAddr. This enables arbitrary read/write access to System Management RAM (SMRAM), allowing an attacker to corrupt firmware memory, exfiltrate SMRAM content via flash, or install persistent implants.