Insyde's Security Pledge

FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow

CVSS Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L

CVE-2026-9805

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.

CWE-787: Out-of-bounds Write

Intel Mobile Platforms:

WildCat Lake: Version 05.72.18.0010
Panther Lake: Version 05.72.17.0032
Lunar Lake: Version 05.62.29.0038
Aarow Lake-H/U: Version 05.56.23.0022
Aarow Lake-S/HX: Version 05.56.23.0037
Raptor Lake: Version Tag 05.47.24.0058
Twin Lake: Version Tag 05.44.45.0029

Intel Server/Embedded Platforms:

Mehlow/Mehlow-R(CFL-S): Trunk
Tatlow (RKS): Trunk
WhiskeyLake: Trunk
CometLake-S: Trunk
TigerLake UP3/H: Trunk
AlderLake: Trunk
Raptor Lake: Trunk
Meteor Lake-U/H: Trunk
Meteor Lake-PS: Trunk
Arrow Lake-S: Trunk
Arrow Lake-U/H: Trunk
ElkhartLake: Trunk
Alder Lake N: Trunk
AmstonLake: Trunk
TwinLake: Trunk