PT-2025-50798 · Intel · Intel System Management Mode

Published 2025-12-12 · Updated 2025-12-17 · CVE-2025-10451

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to Dec. 12, 2025

Description An unchecked output buffer issue may allow arbitrary code execution in System Management Mode (SMM) and potentially lead to SMM memory corruption. This relates to a memory corruption issue in combined DXE/SMM (SMRAM write).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-10451

Affected Products

Intel System Management Mode

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10451 · Security Note
• https://insyde.com/security-pledge/sa-2025009 · Note
• https://t.me/CVEtracker/39555 · Telegram Post
• https://twitter.com/cracbot/status/2001246033112916210 · Twitter Post
• https://t.me/cveNotify/145533 · Telegram Post