CVE-2025-7028 is a critical vulnerability in the Software SMI handler of certain Gigabyte motherboards, allowing a local attacker to achieve arbitrary read/write access to System Management RAM (SMRAM) by supplying a crafted pointer. This unchecked pointer dereferencing in flash management functions enables firmware memory corruption, SMRAM content exfiltration, or persistent implant installation. With a CVSS score of 7.8 (HIGH), the vulnerability has a low attack complexity and requires local privileges, leading to high impacts on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention and media coverage, indicating a high potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| GIGABYTE | UEFI-SmiFlash | 1.0.0CNA affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.