Back to Database
Status published
High
CVE-2025-3770
SMM IDT Privilege Escalation Vulnerability
Vulnerability Description
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3770
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Christopher Domas
More from TianoCore
View All →CVE-2025-2296
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
High
8.4
CVE-2025-2295
Potential iSCSI R2T PDU Vulnerability
Low
3.5
CVE-2024-38805
iSCSI Remote Memory Corruption and Denial of Service
Medium
6.3
CVE-2024-38798
Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
Medium
5.8
CVE-2024-38797
Out-of-bounds Read in HashPeImageByType()
Medium
4.6
Affected Vendor
TianoCore
View all reports →Affected Software
EDK2
Vulnerable Versions:
0
Timeline
Official Publish:
August 7th, 2025
Last Modified:
August 7th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H