AMI AptioV up to _5.45 out-of-bounds

Summaryinfo

A vulnerability marked as critical has been reported in AMI AptioV up to _5.45. Affected by this issue is some unknown functionality. This manipulation causes out-of-bounds. This vulnerability is registered as CVE-2026-66333. The attack needs to be launched locally. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in AMI AptioV up to _5.45 and classified as critical. Affected by this vulnerability is an unknown code. The manipulation with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also impact Confidentiality, and Availability.

The advisory is shared at go.ami.com. This vulnerability is known as CVE-2026-66333 since 07/24/2026. The exploitation appears to be easy. An attack has to be approached locally. The exploitation requires an enhanced level of successful authentication. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

Upgrading to version _5.046 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• AMI

Name

• AptioV

Version

• _5.0
• _5.1
• _5.2
• _5.3
• _5.4
• _5.5
• _5.6
• _5.7
• _5.8
• _5.9
• _5.10
• _5.11
• _5.12
• _5.13
• _5.14
• _5.15
• _5.16
• _5.17
• _5.18
• _5.19
• _5.20
• _5.21
• _5.22
• _5.23
• _5.24
• _5.25
• _5.26
• _5.27
• _5.28
• _5.29
• _5.30
• _5.31
• _5.32
• _5.33
• _5.34
• _5.35
• _5.36
• _5.37
• _5.38
• _5.39
• _5.40
• _5.41
• _5.42
• _5.43
• _5.44
• _5.45

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion