CVE-2024-33658

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Successful exploitation of this vulnerability may lead to privilege escalation and potentially arbitrary code execution, and impact Integrity.

Score

CVSS 3.1 7.8 High

Status

Analyzed - biossecurity@ami.com

Published

2024-11-12

Last modified

2024-11-21

Weaknesses

CWE-119

Affected products

• Aptio V (Ami)
• Aptiov (Ami)

References

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf