Skip to content
OpenAdvisories
High · 7.5 CVE-2024-54084 EUVD-2024-54251GHSA-4prc-vpwg-w736

SMM Arbitrary Write via TOCTOU Vulnerability

Published Mar 11, 2025 · Updated Mar 11, 2025 · Assigned by AMI

Description

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMI AptioV BKS_5.0 – ≤ BKS_5.38 —

References