Skip to content
OpenAdvisories
High · 7.2 CVE-2024-42442 EUVD-2024-39627GHSA-jjfc-8563-3h89

Runtime Service Access outside SMRAM

Published Nov 12, 2024 · Updated Nov 12, 2024 · Assigned by AMI

Description

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode.

Affected products

VendorProductAffectedFixed
AMI AptioV BKS_5.0 – ≤ BKS_5.37 —

Advisories 1

References