CVE-2026-9805CWE-787

CVE-2026-9805

Low · published August 26, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-08-26T09:18Z
References (1)
EPSS history
Timeline
  • 27 AUG 06:48Z
    EPSS moved — → 0%
    epss
  • 26 AUG 01:00Z
    FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow
    cvelistv5