CVE-2025-7028 | GIGABYTE UEFI-SmiFlash 1.0.0 Software SMI SwSmiInputValue untrusted pointer dereference

A vulnerability classified as critical was found in GIGABYTE UEFI-SmiFlash 1.0.0. This vulnerability affects the function SwSmiInputValue of the component Software SMI Handler. The manipulation leads to untrusted pointer dereference.

This vulnerability was named CVE-2025-7028. The attack needs to be approached locally. There is no exploit available.