SMM Part 2: Finding and Turning an Arbitrary Write into Full Code Execution
SMM Part 1: An Overview of Intel SMM Functionality and Security in EDK II and Derived IBV Firmware