CVE-2024-42442 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Aptiov

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
8.8HIGHNVD
CNA7.2
EPSS
0.4%
top 42.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMI Aptio VAMI Aptiov
Timeline
PublishedNov 12

Description

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDami/aptio_v5.0 — 5.037
▶CVEListV5ami/aptiovBKS_5.0 — BKS_5.37

🔴Vulnerability Details

2
CVEList
Runtime Service Access outside SMRAM↗2024-11-12
▶
GHSA
GHSA-jjfc-8563-3h89: APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buf↗2024-11-12
▶
CVE-2024-42442 — AMI Aptiov vulnerability | cvebase