Skip to content
OpenAdvisories
High · 7.5 CVE-2024-42444 EUVD-2024-39541GHSA-45gf-27xm-h64q

TOCTOU Race Condition between DMA and SMM

Published Jan 14, 2025 · Updated Jan 14, 2025 · Assigned by AMI

Description

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device.

Affected products

VendorProductAffectedFixed
AMI AptioV BKS_5.0 – ≤ BKS_5.38 —

References