<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ami</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-58770: APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions </title><link>https://patchthecve.com/cve/CVE-2025-58770.html</link><guid>https://patchthecve.com/cve/CVE-2025-58770.html</guid><pubDate>Wed, 07 Oct 2026 20:10:01 +0000</pubDate><description>HIGH 8.8: APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.</description></item><item><title>CVE-2025-33044: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations with</title><link>https://patchthecve.com/cve/CVE-2025-33044.html</link><guid>https://patchthecve.com/cve/CVE-2025-33044.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 7.8: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability.</description></item><item><title>CVE-2025-22833: APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Inp</title><link>https://patchthecve.com/cve/CVE-2025-22833.html</link><guid>https://patchthecve.com/cve/CVE-2025-22833.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 7.3: APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.</description></item><item><title>CVE-2025-22832: APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local</title><link>https://patchthecve.com/cve/CVE-2025-22832.html</link><guid>https://patchthecve.com/cve/CVE-2025-22832.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 7.8: APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.</description></item><item><title>CVE-2025-22831: APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local</title><link>https://patchthecve.com/cve/CVE-2025-22831.html</link><guid>https://patchthecve.com/cve/CVE-2025-22831.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 7.8: APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.</description></item><item><title>CVE-2025-33045: APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and</title><link>https://patchthecve.com/cve/CVE-2025-33045.html</link><guid>https://patchthecve.com/cve/CVE-2025-33045.html</guid><pubDate>Wed, 17 Jun 2026 09:13:00 +0000</pubDate><description>HIGH 8.2: APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data wr</description></item><item><title>CVE-2025-22834: AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessin</title><link>https://patchthecve.com/cve/CVE-2025-22834.html</link><guid>https://patchthecve.com/cve/CVE-2025-22834.html</guid><pubDate>Wed, 17 Jun 2026 08:50:27 +0000</pubDate><description>MEDIUM 4.2: AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability.</description></item><item><title>CVE-2025-22830: APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access</title><link>https://patchthecve.com/cve/CVE-2025-22830.html</link><guid>https://patchthecve.com/cve/CVE-2025-22830.html</guid><pubDate>Wed, 17 Jun 2026 08:50:25 +0000</pubDate><description>MEDIUM 6.7: APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability.</description></item><item><title>CVE-2025-33043: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally</title><link>https://patchthecve.com/cve/CVE-2025-33043.html</link><guid>https://patchthecve.com/cve/CVE-2025-33043.html</guid><pubDate>Wed, 17 Jun 2026 09:13:00 +0000</pubDate><description>MEDIUM 5.8: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity.</description></item><item><title>CVE-2024-42446: APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race </title><link>https://patchthecve.com/cve/CVE-2024-42446.html</link><guid>https://patchthecve.com/cve/CVE-2024-42446.html</guid><pubDate>Wed, 17 Jun 2026 07:49:27 +0000</pubDate><description>HIGH 7.5: APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.</description></item><item><title>CVE-2024-54085: AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-54085.html</link><guid>https://patchthecve.com/cve/CVE-2024-54085.html</guid><pubDate>Wed, 17 Jun 2026 08:09:44 +0000</pubDate><description>CRITICAL 9.8: AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation
of this vulnerability may lead to a loss of confidentiality, integrity, and/or
availability.</description></item><item><title>CVE-2024-54084: APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race </title><link>https://patchthecve.com/cve/CVE-2024-54084.html</link><guid>https://patchthecve.com/cve/CVE-2024-54084.html</guid><pubDate>Wed, 17 Jun 2026 08:09:44 +0000</pubDate><description>HIGH 7.5: APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.</description></item><item><title>CVE-2024-33659: AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a loca</title><link>https://patchthecve.com/cve/CVE-2024-33659.html</link><guid>https://patchthecve.com/cve/CVE-2024-33659.html</guid><pubDate>Wed, 17 Jun 2026 07:32:10 +0000</pubDate><description>HIGH 8.8: AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, and </description></item><item><title>CVE-2024-42444: APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means</title><link>https://patchthecve.com/cve/CVE-2024-42444.html</link><guid>https://patchthecve.com/cve/CVE-2024-42444.html</guid><pubDate>Wed, 17 Jun 2026 07:49:27 +0000</pubDate><description>HIGH 7.5: APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device.</description></item><item><title>CVE-2024-42442: APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of oper</title><link>https://patchthecve.com/cve/CVE-2024-42442.html</link><guid>https://patchthecve.com/cve/CVE-2024-42442.html</guid><pubDate>Wed, 17 Jun 2026 07:49:27 +0000</pubDate><description>HIGH 7.2: APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode.</description></item><item><title>CVE-2024-33660: An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.</title><link>https://patchthecve.com/cve/CVE-2024-33660.html</link><guid>https://patchthecve.com/cve/CVE-2024-33660.html</guid><pubDate>Wed, 17 Jun 2026 07:32:10 +0000</pubDate><description>MEDIUM 4.3: An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.</description></item><item><title>CVE-2024-33658: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations with</title><link>https://patchthecve.com/cve/CVE-2024-33658.html</link><guid>https://patchthecve.com/cve/CVE-2024-33658.html</guid><pubDate>Wed, 17 Jun 2026 07:32:10 +0000</pubDate><description>HIGH 7.8: APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Successful exploitation of this vulnerability may lead to privilege escalation and potentially arbitrary code execution, and impact Integrity.</description></item><item><title>CVE-2024-2315: APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker</title><link>https://patchthecve.com/cve/CVE-2024-2315.html</link><guid>https://patchthecve.com/cve/CVE-2024-2315.html</guid><pubDate>Wed, 17 Jun 2026 07:24:18 +0000</pubDate><description>HIGH 7.1: APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability.</description></item><item><title>CVE-2024-33657: This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manip</title><link>https://patchthecve.com/cve/CVE-2024-33657.html</link><guid>https://patchthecve.com/cve/CVE-2024-33657.html</guid><pubDate>Wed, 17 Jun 2026 07:32:10 +0000</pubDate><description>HIGH 7.8: This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks.</description></item><item><title>CVE-2024-33656: The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memo</title><link>https://patchthecve.com/cve/CVE-2024-33656.html</link><guid>https://patchthecve.com/cve/CVE-2024-33656.html</guid><pubDate>Wed, 17 Jun 2026 07:32:10 +0000</pubDate><description>HIGH 7.8: The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms</description></item></channel></rss>