CVE-2025-29950
NoneCVSS
—
EPSS
0.2%
Published
Feb 10, 2026
CISA due date
—
The record
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2024-36345 Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module… CWE-1274
- CVE-2025-65396 A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and… CWE-1274
- CVE-2025-59694 The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi… CWE-1274