Aptiov
Monthly
Arbitrary code execution in AMI APTIOV BIOS firmware is achievable by a locally-present privileged user exploiting an incomplete input blocklist (CWE-184) in the BIOS implementation. The flaw affects systems running AMI's APTIOV UEFI/BIOS platform - licensed to a wide range of OEM server and workstation vendors - and successful exploitation compromises confidentiality, integrity, and availability at both the firmware and OS layers, with cascading impact on the entire system stack. No public exploit code or CISA KEV listing has been identified at time of analysis.
Arbitrary code execution in AMI APTIOV BIOS firmware is achievable by a locally-present privileged user exploiting an incomplete input blocklist (CWE-184) in the BIOS implementation. The flaw affects systems running AMI's APTIOV UEFI/BIOS platform - licensed to a wide range of OEM server and workstation vendors - and successful exploitation compromises confidentiality, integrity, and availability at both the firmware and OS layers, with cascading impact on the entire system stack. No public exploit code or CISA KEV listing has been identified at time of analysis.