CVE-2025-7029
Last modified
CVE-2025-7029 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated before performing multiple structured memory writes based on OcSetup NVRAM values, enabling arbitrary SMRAM corruption and potential SMM privilege escalation.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated before performing multiple structured memory writes based on OcSetup NVRAM values, enabling arbitrary SMRAM corruption and potential SMM privilege escalation.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-7029?
How severe is CVE-2025-7029?
How do I fix CVE-2025-7029?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-70250Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 …7.5
- CVE-2025-70251Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 …7.5
- CVE-2025-70252An issue was discovered in /goform/WifiWpsStart in Tenda AC6…7.5
- CVE-2025-7026A vulnerability in the Software SMI handler (SwSmiInputValue…8.2
- CVE-2025-7027A vulnerability in the Software SMI handler (SwSmiInputValue…8.2
- CVE-2025-7028A vulnerability in the Software SMI handler (SwSmiInputValue…7.8
- CVE-2025-70296A stored HTML injection vulnerability in the Recipe Notes re…5.4
- CVE-2025-70297A stored cross-site scripting (XSS) vulnerability in the rec…6.1
- CVE-2025-70298GPAC v2.4.0 was discovered to contain an out-of-bounds read …8.2
- CVE-2025-70299A heap overflow in the avi_parse_input_file() function of GP…6.5
- CVE-2025-7030Privilege Defined With Unsafe Actions vulnerability in Drupa…6.5
- CVE-2025-70302A heap overflow in the ghi_dmx_declare_opid_bin() function o…5.5
Are you affected by CVE-2025-7029?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST