CVE-2024-33659 — Improper Input Validation in Aptiov

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.7MEDIUMNVD
EPSS
0.1%
top 79.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMI Aptio VAMI Aptiov
Timeline
PublishedFeb 11

Description

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, and Availability.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L

Affected Packages2 packages

▶NVDami/aptio_v5.0 — 5.038
▶CVEListV5ami/aptiovBKS_5.0 — BKS_5.38

🔴Vulnerability Details

2
CVEList
BiosGuard Buffer Overflow and TOCTOU Vulnerability↗2025-02-11
▶
GHSA
GHSA-r8rq-6jrf-gqrw: AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker↗2025-02-11
▶
CVE-2024-33659 — Improper Input Validation in Aptiov | cvebase