Gigabyte UEFI firmware (SMM, OcHeader/OcData pointer control): Unchecked register use lets the attacker control

Impact

Unchecked register use lets the attacker control the OcHeader and OcData pointers handled in SMM, producing arbitrary read and write at ring -2 - the same firmware-persistence outcome as the rest of the batch.

Who can reach it

Local privileged code on the host.

What to do

Gigabyte BIOS update per board plus reboot; delivered in the same firmware image as CVE-2025-7026 through 7028, so treat all four as one change.

References