CVE-2025-7029 - CVE House
Back to Database
Status published Unknown CVE-2025-7029

SMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler

Vulnerability Description

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated before performing multiple structured memory writes based on OcSetup NVRAM values, enabling arbitrary SMRAM corruption and potential SMM privilege escalation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7029

Credits & Attribution

No credits recorded in the NVD database.

References

More from GIGABYTE

View All →
CVE-2025-7028
SMM Arbitrary Memory Access via Flash Handler with Unchecked FuncBlock Pointer
Unknown 0
CVE-2025-7027
SMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx1
Unknown 0
CVE-2025-7026
SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0
Unknown 0
CVE-2025-14302
GIGABYTE｜Motherboard - Protection Mechanism Failure
High 7
CVE-2017-3198
GIGABYTE BRIX UEFI firmware is not cryptographically signed
Critical 9.8

Affected Vendor

Affected Software

UEFI-OverClockSmiHandler
Vulnerable Versions:
1.0.0

Timeline

Official Publish: July 11th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.