Skip to content
OpenAdvisories
High · 7.5 CVE-2024-42446 EUVD-2024-54476GHSA-pgm8-5pfj-3v9h

TOCTOU in SmmWhea

Published May 13, 2025 · Updated May 13, 2025 · Assigned by AMI

Description

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMI AptioV BKS_5.0 – ≤ BKS_5.39 —

Advisories 1

References