Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-66335 EUVD-2026-121285GHSA-gq94-rcx4-4jr5

Heap Overflow in SmiVariable SMM Handler

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by AMI

Description

AMI APTIOV contains vulnerabilities in BIOS where
privileged users may cause the “Heap-based Buffer Overflow” by local access.
Successful exploitation of this vulnerability may lead to a denial of service
during firmware update processing, such as a crash or failed update if the
out-of-bounds write hits unmapped memory. It could also impact Confidentiality,
Integrity, and Availability.

Affected products

VendorProductAffectedFixed
AMI AptioV AptioV_5.0 – < AptioV_5.045 AptioV_5.045

Advisories 1

References