AMI AptioV up to _5.44 heap-based overflow

Summaryinfo

A vulnerability categorized as very critical has been discovered in AMI AptioV up to _5.44. This impacts an unknown function. Executing a manipulation can lead to heap-based overflow. This vulnerability is tracked as CVE-2026-66335. The attack is restricted to local execution. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as very critical was found in AMI AptioV up to _5.44. This vulnerability affects an unknown functionality. The manipulation with an unknown input leads to a heap-based overflow vulnerability. The CWE definition for the vulnerability is CWE-122. The product writes past the end of a buffer that was allocated on the heap. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds write hits unmapped memory. It could also impact Confidentiality, Integrity, and Availability.

The advisory is available at go.ami.com. This vulnerability was named CVE-2026-66335 since 07/24/2026. The exploitation appears to be easy. Local access is required to approach this attack. Additional levels of successful authentication are required for exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 11/10/2026).

Upgrading to version _5.045 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• AMI

Name

• AptioV

Version

• _5.0
• _5.1
• _5.2
• _5.3
• _5.4
• _5.5
• _5.6
• _5.7
• _5.8
• _5.9
• _5.10
• _5.11
• _5.12
• _5.13
• _5.14
• _5.15
• _5.16
• _5.17
• _5.18
• _5.19
• _5.20
• _5.21
• _5.22
• _5.23
• _5.24
• _5.25
• _5.26
• _5.27
• _5.28
• _5.29
• _5.30
• _5.31
• _5.32
• _5.33
• _5.34
• _5.35
• _5.36
• _5.37
• _5.38
• _5.39
• _5.40
• _5.41
• _5.42
• _5.43
• _5.44

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion