Summary
Ein Angreifer kann mehrere Schwachstellen in AMI AptioV ausnutzen, um beliebigen Programmcode auszuführen, um Daten zu manipulieren, um seine Privilegien zu erhöhen und um Informationen offenzulegen.
Product
AMI Aptio V ist eine UEFI-Firmware-Lösung von American Megatrends, die als BIOS-Nachfolger für die Initialisierung von Hardware während des Systemstarts dient.
Vulnerabilities 5
-
High 8.3
UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and a…
-
High 8.2
UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confid…
-
High 7.1
UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact …
-
High 7.1
UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidenti…
-
Medium 5.8
Uncleared Password Keystrokes Vulnerability
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and f…
Revision history
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
AMI AptioV Security Advisory AMI-SA-2026002 vom 2026-10-13
https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2026/AMI-SA-2026002.pdf
-
Lenovo Security Advisory LEN-228458 vom 2026-10-14
https://support.lenovo.com/us/en/product_security/LEN-228458
-
Dell Security Advisory DSA-2026-230 vom 2026-10-26
https://www.dell.com/support/kbdoc/de-de/000516289/dsa-2026-230-security-update-for-dell-client-platform-bios-for-multiple-ami-bios-vulnerabilities