CVE-2025-3770 — SMM IDT Privilege Escalation Vulnerability

CVE-2025-3770

SMM IDT Privilege Escalation Vulnerability PUBLISHED

Description (CNA)

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

Affected (CNA)

Vendor / product	Versions
TianoCore / EDK2	affected 0 through edk2-stable202505

CWE

CWE-693

References

https://github.com/tianocore/edk2/security/advisories/GHSA-vx5v-4gg6-6qxr

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.