# cve.now: AMI

The newest entries naming AMI as an affected vendor (up to 200), of 70 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-66335](https://cve.now/CVE-2026-66335.md): Heap Overflow in SmiVariable SMM Handler (CVSS 6.8)
- [CVE-2026-66334](https://cve.now/CVE-2026-66334.md): OFBD SMM Write Validation Issues (CVSS 6.8)
- [CVE-2026-66333](https://cve.now/CVE-2026-66333.md): OFBD SMM Read Validation Issues (CVSS 4.8)
- [CVE-2026-66332](https://cve.now/CVE-2026-66332.md): OOB-Read in FmpCapsuleUpdate (CVSS 4.6)
- [CVE-2026-0893](https://cve.now/CVE-2026-0893.md): Uncleared Password Keystrokes Vulnerability (CVSS 5.8)
- [CVE-2025-58774](https://cve.now/CVE-2025-58774.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 8.3)
- [CVE-2025-58773](https://cve.now/CVE-2025-58773.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 7.1)
- [CVE-2025-58772](https://cve.now/CVE-2025-58772.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 8.2)
- [CVE-2025-58771](https://cve.now/CVE-2025-58771.md): UEFI OOB Write and Buffer Overflow Vulnerabilities (CVSS 7.1)
- [CVE-2026-33197](https://cve.now/CVE-2026-33197.md): BDS Module Bypass Secure Boot Advisory (CVSS 8.7)
- [CVE-2025-58770](https://cve.now/CVE-2025-58770.md): TCG2 TPM RT Not Locked Issue (CVSS 7.2)
- [CVE-2025-33044](https://cve.now/CVE-2025-33044.md): exFat Memory Corruption Issue (CVSS 5.8)
- [CVE-2025-22833](https://cve.now/CVE-2025-22833.md): FixupArray Pointer Validation in NTFS (CVSS 4.6)
- [CVE-2025-22832](https://cve.now/CVE-2025-22832.md): Buffer Overflow in NTFS when parsing the ATTRIBUTE\_LIST (CVSS 5.8)
- [CVE-2025-22831](https://cve.now/CVE-2025-22831.md): Buffer Overflow in NTFS when parsing the VOLUME\_NAME (CVSS 5.8)
- [CVE-2025-33045](https://cve.now/CVE-2025-33045.md): Legacy Serial Redirection SMRAM Vulnerabilities (CVSS 8.2)
- [CVE-2025-22830](https://cve.now/CVE-2025-22830.md): SmiFlash Race Condition Vulnerability (CVSS 7.3)
- [CVE-2025-22834](https://cve.now/CVE-2025-22834.md): ThirdPartyVideo SetVariable Vulnerability (CVSS 4.2)
- [CVE-2025-33043](https://cve.now/CVE-2025-33043.md): SMM buffer Integrity (CVSS 5.8)
- [CVE-2024-42446](https://cve.now/CVE-2024-42446.md): TOCTOU in SmmWhea (CVSS 7.5)
- [CVE-2024-54084](https://cve.now/CVE-2024-54084.md): SMM Arbitrary Write via TOCTOU Vulnerability (CVSS 7.5)
- [CVE-2024-54085](https://cve.now/CVE-2024-54085.md): Redfish Authentication Bypass (CVSS 10.0, KEV)
- [CVE-2024-33659](https://cve.now/CVE-2024-33659.md): BiosGuard Buffer Overflow and TOCTOU Vulnerability (CVSS 5.7)
- [CVE-2024-42444](https://cve.now/CVE-2024-42444.md): TOCTOU Race Condition between DMA and SMM (CVSS 7.5)
- [CVE-2024-2315](https://cve.now/CVE-2024-2315.md): SMM arbitrary code execution in Overclock (CVSS 6.8)
- [CVE-2024-33658](https://cve.now/CVE-2024-33658.md): Buffer Overflow Vulnerability In OFBD (CVSS 4.4)
- [CVE-2024-33660](https://cve.now/CVE-2024-33660.md): Potential Firmware update without integrity check (CVSS 5.2)
- [CVE-2024-42442](https://cve.now/CVE-2024-42442.md): Runtime Service Access outside SMRAM (CVSS 7.2)
- [CVE-2024-33657](https://cve.now/CVE-2024-33657.md): Smm Callout in SmmComputrace Module (CVSS 7.8)
- [CVE-2024-33656](https://cve.now/CVE-2024-33656.md): Memory Leak in SmmComuptrace Module (CVSS 7.8)
- [CVE-2023-37297](https://cve.now/CVE-2023-37297.md): heap memory overflow (CVSS 8.3)
- [CVE-2023-37296](https://cve.now/CVE-2023-37296.md): Stack-based Buffer Overflow (CVSS 8.3)
- [CVE-2023-37295](https://cve.now/CVE-2023-37295.md): Heap-based Buffer Overflow (CVSS 8.3)
- [CVE-2023-37294](https://cve.now/CVE-2023-37294.md): Heap-based Buffer Overflow (CVSS 8.3)
- [CVE-2023-37293](https://cve.now/CVE-2023-37293.md): stack-based buffer overflow (CVSS 9.6)
- [CVE-2023-34333](https://cve.now/CVE-2023-34333.md): Untrusted Pointer Dereference (CVSS 7.8)
- [CVE-2023-3043](https://cve.now/CVE-2023-3043.md): Stack-based Buffer Overflow BMC (CVSS 9.6)
- [CVE-2023-34332](https://cve.now/CVE-2023-34332.md): Untrusted Pointer Dereference in BMC (CVSS 7.8)
- [CVE-2023-39538](https://cve.now/CVE-2023-39538.md): Failure when uploading a Logo image file (CVSS 7.5)
- [CVE-2023-39539](https://cve.now/CVE-2023-39539.md): Failure when uploading a Logo image file (CVSS 7.5)
- [CVE-2023-39537](https://cve.now/CVE-2023-39537.md): Improper input validation in BIOS TCG2 (CVSS 7.5)
- [CVE-2023-39536](https://cve.now/CVE-2023-39536.md): Improper input validation in BIOS OFBD (CVSS 7.5)
- [CVE-2023-39535](https://cve.now/CVE-2023-39535.md): Improper input validation in BIOS (CVSS 7.5)
- [CVE-2023-34470](https://cve.now/CVE-2023-34470.md): Improper access control (CVSS 6.8)
- [CVE-2023-34469](https://cve.now/CVE-2023-34469.md): Cold Rest Vulnerabiltiy (CVSS 4.9)
- [CVE-2023-34330](https://cve.now/CVE-2023-34330.md): Code injection via Dynamic Redfish Extension interface (CVSS 8.2)
- [CVE-2023-34329](https://cve.now/CVE-2023-34329.md): Authentication Bypass via HTTP Header Spoofing (CVSS 9.1)
- [CVE-2023-34473](https://cve.now/CVE-2023-34473.md): Usage of Hard-coded Credentials (CVSS 6.6)
- [CVE-2023-34472](https://cve.now/CVE-2023-34472.md): AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. (CVSS 5.7)
- [CVE-2023-34471](https://cve.now/CVE-2023-34471.md): Missing Cryptographic Step (CVSS 6.3)
- [CVE-2023-34338](https://cve.now/CVE-2023-34338.md): hard coded cryptographic key (CVSS 7.1)
- [CVE-2023-34337](https://cve.now/CVE-2023-34337.md): Inadequate Encryption Strength (CVSS 7.6)
- [CVE-2023-34336](https://cve.now/CVE-2023-34336.md): AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may (CVSS 8.1)
- [CVE-2023-34335](https://cve.now/CVE-2023-34335.md): AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secur (CVSS 7.7)
- [CVE-2023-34334](https://cve.now/CVE-2023-34334.md): AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, wh (CVSS 7.2)
- [CVE-2023-34343](https://cve.now/CVE-2023-34343.md): AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, wh (CVSS 7.2)
- [CVE-2023-34342](https://cve.now/CVE-2023-34342.md): AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, (CVSS 6.0)
- [CVE-2023-34341](https://cve.now/CVE-2023-34341.md): AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locatio (CVSS 7.2)
- [CVE-2023-34345](https://cve.now/CVE-2023-34345.md): AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may l (CVSS 6.5)
- [CVE-2023-34344](https://cve.now/CVE-2023-34344.md): A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username (CVSS 5.3)
- [CVE-2022-40258](https://cve.now/CVE-2022-40258.md): Weak password hashes for Redfish & API (CVSS 5.3)
- [CVE-2022-26872](https://cve.now/CVE-2022-26872.md): Password reset interception via API (CVSS 8.3)
- [CVE-2022-2827](https://cve.now/CVE-2022-2827.md): AMI MegaRAC User Enumeration Vulnerability (CVSS 7.5)
- [CVE-2022-40259](https://cve.now/CVE-2022-40259.md): MegaRAC Default Credentials Vulnerability (CVSS 8.3)
- [CVE-2022-40242](https://cve.now/CVE-2022-40242.md): MegaRAC Default Credentials Vulnerability (CVSS 7.5)
- [CVE-2022-40262](https://cve.now/CVE-2022-40262.md): The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase. (CVSS 8.2)
- [CVE-2022-40261](https://cve.now/CVE-2022-40261.md): SMM memory corruption vulnerability in OverClockSmiHandler SMM driver (CVSS 8.2)
- [CVE-2022-40250](https://cve.now/CVE-2022-40250.md): Stack overflow vulnerability in SMI handler on SmmSmbiosElog. (CVSS 8.8)
- [CVE-2022-40246](https://cve.now/CVE-2022-40246.md): Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase. (CVSS 7.2)
- [CVE-2022-26873](https://cve.now/CVE-2022-26873.md): The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase. (CVSS 8.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ami
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.