PatchTheCVEami vulnerabilities
Recent CVEs affecting ami products. 18 tracked.
ami has 18 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 18. Most recent: 2025-12-12. Highest priority: CVE-2024-54085 (score 92/100).
- CVE-2025-22831 HIGH 7.8 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local
- CVE-2025-22832 HIGH 7.8 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local
- CVE-2025-33044 HIGH 7.8 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations with
- CVE-2025-22833 HIGH 7.3 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Inp
- CVE-2025-58770 HIGH 8.8 UPGRADE APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions
- CVE-2025-33045 HIGH 8.2 UPGRADE APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and
- CVE-2025-33043 MEDIUM 5.8 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally
- CVE-2025-22834 MEDIUM 4.2 UPGRADE AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessin
- CVE-2025-22830 MEDIUM 6.7 UPGRADE APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access
- CVE-2024-54085 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
- CVE-2024-54084 HIGH 7.5 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race
- CVE-2024-42446 HIGH 7.5 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race
- CVE-2024-42444 HIGH 7.5 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means
- CVE-2024-42442 HIGH 7.2 UPGRADE APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of oper
- CVE-2024-33660 MEDIUM 4.3 UPGRADE An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.
- CVE-2024-33659 HIGH 8.8 UPGRADE AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a loca
- CVE-2024-33658 HIGH 7.8 UPGRADE APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations with
- CVE-2024-2315 HIGH 7.1 UPGRADE APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker
FAQ
How do I fix ami vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ami being exploited right now?
Yes: 1 ami CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which ami CVE should I patch first?
CVE-2024-54085 currently ranks highest (92/100): AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability.