Ami - vulnerabilities (CVEs)

69 CVEs in 10 products, 5 in the last 30 days, newest from 2026-10-13.

Products

Aptiov - 32 CVEs
Aptio V - 30 CVEs
Megarac Sp-x - 23 CVEs
Megarac Spx - 21 CVEs
Aptio - 5 CVEs
Megarac Spx12 - 5 CVEs
Megarac Spx13 - 4 CVEs
Megarac Spx-12 - 2 CVEs
Megarac Spx-13 - 2 CVEs
Megarac-spx - 1 CVEs

Newest CVEs of Ami

CVE-2026-0893 - CVSS 5.8 (medium), 2026-10-13: AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access.…
CVE-2025-58774 - CVSS 8.3 (high), 2026-10-13: AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this…
CVE-2025-58773 - CVSS 7.1 (high), 2026-10-13: AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could…
CVE-2025-58772 - CVSS 8.2 (high), 2026-10-13: AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability…
CVE-2025-58771 - CVSS 7.1 (high), 2026-10-13: AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this…
CVE-2026-33197 - CVSS 8.7 (high), 2026-09-08: AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful…
CVE-2025-58770 - CVSS 8.8 (high), 2025-12-12: APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful…
CVE-2025-22833 - CVSS 7.3 (high), 2025-10-14: APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation…
CVE-2025-22832 - CVSS 7.8 (high), 2025-10-14: APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to…
CVE-2025-22831 - CVSS 7.8 (high), 2025-10-14: APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to…
CVE-2025-33044 - CVSS 7.8 (high), 2025-10-14: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means.…
CVE-2025-33045 - CVSS 8.2 (high), 2025-09-09: APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an…
CVE-2025-22834 - CVSS 5.3 (medium), 2025-08-12: AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability…
CVE-2025-22830 - CVSS 7.3 (high), 2025-08-12: APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may…
CVE-2025-33043 - CVSS 6.1 (medium), 2025-05-29: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can…
CVE-2024-42446 - CVSS 7.5 (high), 2025-05-13: APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful…
CVE-2024-54085 - CVSS 10 (critical), 2025-03-11: AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful…
CVE-2024-54084 - CVSS 7.5 (high), 2025-03-11: APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful…
CVE-2024-33659 - CVSS 8.8 (high), 2025-02-11: AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these…
CVE-2024-42444 - CVSS 7.8 (high), 2025-01-14: APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may…
CVE-2024-42442 - CVSS 8.8 (high), 2024-11-12: APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over…
CVE-2024-33658 - CVSS 7.8 (high), 2024-11-12: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local.…
CVE-2024-33660 - CVSS 5.2 (medium), 2024-11-12: An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.
CVE-2024-2315 - CVSS 7.1 (high), 2024-11-12: APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to…
CVE-2024-33656 - CVSS 7.8 (high), 2024-08-21: The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation,…
CVE-2024-33657 - CVSS 7.8 (high), 2024-08-21: This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from…
CVE-2023-3043 - CVSS 9.6 (critical), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of…
CVE-2023-37297 - CVSS 8.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this…
CVE-2023-34333 - CVSS 7.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation…
CVE-2023-37295 - CVSS 8.8 (high), 2024-01-09: AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this…