{"id":"CVE-2026-66332","kind":"vulnerability","aliases":["CVE-2026-66332"],"related":[],"title":"AMI Aptio BIOS: out-of-bounds read lets a privileged local user crash firmware updates","description":"AMI APTIOV contains a vulnerability in BIOS\nwhere a privileged\nuser may cause the “Out-of-Bound Read” by local\naccess. Successful exploitation of this vulnerability may lead to a denial of\nservice during firmware update processing, such as a crash or failed update if\nthe out-of-bounds read hits unmapped memory. It could also potentially impact Confidentiality and Availability.","summary":"AMI Aptio BIOS firmware has an out-of-bounds read that a privileged local user can trigger. Successful exploitation may crash firmware update processing or cause a failed update, and could also expose or disrupt data.","severity":"medium","cvss":4.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ami-aptio","bios","firmware","linux","vendor","windows"],"not_affected_if":["no-local-privileged-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T17:17:46+00:00","first_seen_at":"2026-11-10T17:22:44+00:00","triaged_at":"2026-11-10T17:25:45+00:00","updated_at":"2026-11-10T17:25:45+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T17:25:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMI Aptio BIOS: out-of-bounds read lets a privileged local user crash firmware updates","impact":"low","summary":"AMI Aptio BIOS firmware has an out-of-bounds read that a privileged local user can trigger. Successful exploitation may crash firmware update processing or cause a failed update, and could also expose or disrupt data.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["bios","firmware","ami-aptio","windows","linux"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local privileged user crashes firmware update, possible data exposure","analyst_note":"Find the affected AMI Aptio firmware versions and vendor fixed builds from the AMI security bulletin or NVD CPE data; sources here give no version ranges.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-privileged-access"],"who_is_affected":"Machines running affected AMI Aptio BIOS firmware, where the attacker already has privileged local access. The sources do not list affected firmware versions or board vendors, so the exposure cannot be narrowed further from them.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000695,"input_tokens":4592,"output_tokens":472,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':18A,21A '-66332':19A,22A 'access':89C 'also':63B,125C 'ami':1A,24B,31B,68C 'ami-aptio':23B 'aptio':2A,25B,32B 'aptiov':69C 'avail':130C 'bio':3A,26B,33B,74C 'bound':7A,40B,85C,118C 'caus':57B,80C 'confidenti':128C 'contain':70C 'could':62B,124C 'crash':14A,52B,109C 'cve':17A,20A 'data':67B 'denial':99C 'disrupt':66B 'exploit':50B,91C 'expos':64B 'fail':59B,111C 'firmwar':15A,27B,34B,53B,103C 'hit':120C 'impact':127C 'lead':96C 'let':9A 'linux':28B 'local':12A,45B,88C 'may':51B,79C,95C 'memori':122C 'out-of-bound':4A,37B,82C,115C 'potenti':126C 'privileg':11A,44B,77C 'process':55B,105C 'read':8A,41B,86C,119C 'servic':101C 'success':49B,90C 'trigger':48B 'unmap':121C 'updat':16A,54B,60B,104C,112C 'user':13A,46B,78C 'vendor':29B 'vulner':72C,94C 'window':30B","nicknames":[],"mitigations":[],"who_affected":"Machines running affected AMI Aptio BIOS firmware, where the attacker already has privileged local access. The sources do not list affected firmware versions or board vendors, so the exposure cannot be narrowed further from them.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amiaptio","bios","firmware","linux","medium","vendor","windows"],"campaign_type":null,"search_a":"'-2026':18A,21A '-66332':19A,22A 'ami':1A 'aptio':2A 'bio':3A 'bound':7A 'crash':14A 'cve':17A,20A 'firmwar':15A 'let':9A 'local':12A 'out-of-bound':4A 'privileg':11A 'read':8A 'updat':16A 'user':13A","search_b":"'also':63B 'ami':24B,31B 'ami-aptio':23B 'aptio':25B,32B 'bio':26B,33B 'bound':40B 'caus':57B 'could':62B 'crash':52B 'data':67B 'disrupt':66B 'exploit':50B 'expos':64B 'fail':59B 'firmwar':27B,34B,53B 'linux':28B 'local':45B 'may':51B 'out-of-bound':37B 'privileg':44B 'process':55B 'read':41B 'success':49B 'trigger':48B 'updat':54B,60B 'user':46B 'vendor':29B 'window':30B","search_c":"'access':89C 'also':125C 'ami':68C 'aptiov':69C 'avail':130C 'bio':74C 'bound':85C,118C 'caus':80C 'confidenti':128C 'contain':70C 'could':124C 'crash':109C 'denial':99C 'exploit':91C 'fail':111C 'firmwar':103C 'hit':120C 'impact':127C 'lead':96C 'local':88C 'may':79C,95C 'memori':122C 'out-of-bound':82C,115C 'potenti':126C 'privileg':77C 'process':105C 'read':86C,119C 'servic':101C 'success':90C 'unmap':121C 'updat':104C,112C 'user':78C 'vulner':72C,94C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"biossecurity@ami.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-66332","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66332","severity":null,"published_at":"2026-11-10T17:17:46+00:00","modified_at":"2026-11-10T17:17:46+00:00","first_seen_at":"2026-11-10T17:22:44+00:00","fetched_at":"2026-11-10T17:22:44+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}