Description
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.
Published: 2026-08-26
Score: 2.7 Low
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Intel Mobile platforms: WildCat Lake: Version 05.72.18.0010 Panther Lake: Version 05.72.17.0032 Lunar Lake: Version 05.62.29.0038 Aarow Lake-H/U: Version 05.56.23.0022 Aarow Lake-S/HX: Version 05.56.23.0037 Raptor Lake: Version Tag 05.47.24.0058 Twin Lake: Version Tag 05.44.45.0029 Intel Server/Embedded platforms: Mehlow/Mehlow-R(CFL-S): Trunk Tatlow (RKS): Trunk WhiskeyLake: Trunk CometLake-S: Trunk TigerLake UP3/H: Trunk AlderLake: Trunk Raptor Lake: Trunk Meteor Lake-U/H: Trunk Meteor Lake-PS: Trunk Arrow Lake-S: Trunk Arrow Lake-U/H: Trunk ElkhartLake: Trunk Alder Lake N: Trunk AmstonLake: Trunk TwinLake: Trunk

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 26 Aug 2026 01:15:00 +0000

Type Values Removed Values Added
Description SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.
Title FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 2.7, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Insyde

Published:

Updated: 2026-08-26T01:00:25.855Z

Reserved: 2026-05-28T06:24:59.358Z

Link: CVE-2026-9805

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T03:30:04Z

Weaknesses