CVE-2026-9805FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflow
- 2.7LowCVSS base score
- 0.13%Exploitation in 30 daysEPSS · top 97% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow.
Timeline
ID reserved
By Insyde
- 3 months later
· 3 months later
Published
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| InsydeCNA (assigner) | 3.1 | Low2.7 | CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L |
| NVDNVD · Awaiting Analysis | 3.1 | Low2.7 | CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L |
- EPSS (exploitation in 30 days)
- 0.13% · top 97% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.7.
Affected products
- affected See in the Solution
What to do
Solution: Intel Mobile platforms: WildCat Lake: Version 05.72.18.0010 Panther Lake: Version 05.72.17.0032 Lunar Lake: Version 05.62.29.0038 Aarow Lake-H/U: Version 05.56.23.0022 Aarow Lake-S/HX: Version 05.56.23.0037 Raptor Lake: Version Tag 05.47.24.0058 Twin Lake: Version Tag 05.44.45.0029 Intel Server/Embedded platforms: Mehlow/Mehlow-R(CFL-S): Trunk Tatlow (RKS): Trunk WhiskeyLake: Trunk CometLake-S: Trunk TigerLake UP3/H: Trunk AlderLake: Trunk Raptor Lake: Trunk Meteor Lake-U/H: Trunk Meteor Lake-PS: Trunk Arrow Lake-S: Trunk Arrow Lake-U/H: Trunk ElkhartLake: Trunk Alder Lake N: Trunk AmstonLake: Trunk TwinLake: Trunk
References
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-66226 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-9805)Record last updated .