Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in AMI AptioV ausnutzen, um einen Denial of Service Angriff durchzuführen, Dateien zu manipulieren oder Informationen offenzulegen.
Product
AMI Aptio V ist eine UEFI-Firmware-Lösung von American Megatrends, die als BIOS-Nachfolger für die Initialisierung von Hardware während des Systemstarts dient.
Vulnerabilities 4
-
Medium 6.8
OFBD SMM Write Validation Issues
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed …
-
Medium 6.8
Heap Overflow in SmiVariable SMM Handler
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or …
-
Medium 4.8
OFBD SMM Read Validation Issues
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed u…
-
Medium 4.6
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Out-of-Bound Read” by local access. …
Revision history
-
#1
Initiale Fassung
References
-
AMI Security Advisory vom 2026-11-10
https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026003.pdf