AMI vulnerabilities
70 CVEs and advisories name AMI as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-66335Heap Overflow in SmiVariable SMM Handler
- CVE-2026-66334OFBD SMM Write Validation Issues
- CVE-2026-66333OFBD SMM Read Validation Issues
- CVE-2026-66332OOB-Read in FmpCapsuleUpdate
- CVE-2026-0893Uncleared Password Keystrokes Vulnerability
- CVE-2025-58774UEFI OOB Write and Buffer Overflow Vulnerabilities
- CVE-2025-58773UEFI OOB Write and Buffer Overflow Vulnerabilities
- CVE-2025-58772UEFI OOB Write and Buffer Overflow Vulnerabilities
- CVE-2025-58771UEFI OOB Write and Buffer Overflow Vulnerabilities
- CVE-2026-33197BDS Module Bypass Secure Boot Advisory
- CVE-2025-58770TCG2 TPM RT Not Locked Issue
- CVE-2025-33044exFat Memory Corruption Issue
- CVE-2025-22833FixupArray Pointer Validation in NTFS
- CVE-2025-22832Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST
- CVE-2025-22831Buffer Overflow in NTFS when parsing the VOLUME_NAME
- CVE-2025-33045Legacy Serial Redirection SMRAM Vulnerabilities
- CVE-2025-22830SmiFlash Race Condition Vulnerability
- CVE-2025-22834ThirdPartyVideo SetVariable Vulnerability
- CVE-2025-33043SMM buffer Integrity
- CVE-2024-42446TOCTOU in SmmWhea
- CVE-2024-54084SMM Arbitrary Write via TOCTOU Vulnerability
- CVE-2024-54085Redfish Authentication Bypass
- CVE-2024-33659BiosGuard Buffer Overflow and TOCTOU Vulnerability
- CVE-2024-42444TOCTOU Race Condition between DMA and SMM
- CVE-2024-2315SMM arbitrary code execution in Overclock
- CVE-2024-33658Buffer Overflow Vulnerability In OFBD
- CVE-2024-33660Potential Firmware update without integrity check
- CVE-2024-42442Runtime Service Access outside SMRAM
- CVE-2024-33657Smm Callout in SmmComputrace Module
- CVE-2024-33656Memory Leak in SmmComuptrace Module