CVE-2025-10451CWE-787

CVE-2025-10451

High · published December 12, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

⚡ An unchecked output buffer could turn your system into a playground for malicious code! Imagine letting a party guest run wild without supervision — that’s what’s happening here! 🎉 Think of it like a restaurant kitchen where a chef leaves a door open. Unsupervised, anyone can walk in and start cooking up trouble, possibly ruining the whole meal. In this case, the unchecked output buffer allows attackers to execute arbitrary code at a critical level. This could lead to absolute chaos, allowing an attacker to execute malicious code that could not only compromise the system but also lead to memory corruption in the System Management Mode. The potential for damage here is high, and if exploited, it could bring your operations to a standstill! 🔥

Put simply

Think of it like a restaurant kitchen where a chef leaves a door open. Unsupervised, anyone can walk in and start cooking up trouble, possibly ruining the whole meal. In this case, the unchecked output buffer allows attackers to execute arbitrary code at a critical level. CVE-2025-10451 highlights a vulnerability where the unchecked output buffer in SMM can allow for arbitrary code execution and may result in memory corruption. This flaw enables attackers to manipulate the execution flow and memory state of the system.

What to do

This could lead to absolute chaos, allowing an attacker to execute malicious code that could not only compromise the system but also lead to memory corruption in the System Management Mode. The potential for damage here is high, and if exploited, it could bring your operations to a standstill! 🔥 To protect yourself, ensure that your systems are updated with patches addressing this vulnerability. Review your output buffer handling to implement necessary bounds and checks. Don't wait — prioritize this fix! 🔒 You've got this! Take action now, and you'll tighten up your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-12T06:15Z
References (1)
EPSS history
Timeline
  • 12 DEC 00:28Z
    H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)
    cvelistv5