Skip to content
OpenAdvisories
Medium WID-SEC-2026-3925 5 CVEs

AMI AptioV: Mehrere Schwachstellen

Published Oct 13, 2026 · Updated Oct 26, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in AMI AptioV ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um seine Privilegien zu erhöhen und um Informationen offenzulegen.

Product

AMI Aptio V ist eine UEFI-Firmware-Lösung von American Megatrends, die als BIOS-Nachfolger für die Initialisierung von Hardware während des Systemstarts dient.

Vulnerabilities 5

  • High 8.3

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and a…

  • High 8.2

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confid…

  • High 7.1

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact …

  • High 7.1

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    AMI APTIOV contains vulnerabilities in BIOS where users may cause  "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidenti…

  • Medium 5.8

    Uncleared Password Keystrokes Vulnerability

    AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and f…

Revision history

  1. #2

    Neue Updates von Dell aufgenommen

  2. #1

    Initiale Fassung

References