privileged users may cause the “Out-of-Bounds Read” by
local access. Successful exploitation of this vulnerability may lead to a
denial of service during firmware update processing, such as a crash or failed
update if the out-of-bounds read hits unmapped memory. It could also impact
Confidentiality, and Availability.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| AMI | AptioV | unaffected |
|
No data.
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 10 Nov 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also impact Confidentiality, and Availability. | |
| Title | OFBD SMM Read Validation Issues | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: AMI
Published:
Updated: 2026-11-10T16:22:00.305Z
Reserved: 2026-07-24T21:31:28.218Z
Link: CVE-2026-66333
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-10T17:17:46.603
Modified: 2026-11-10T17:17:46.603
Link: CVE-2026-66333
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-125
Out-of-bounds Read