CVE-2026-66334 · Infrastructure
NO FIX YET
AMI Aptiov BIOS firmware contains an out-of-bounds write that a privileged local user can trigger. Successful exploitation may crash the machine or fail a firmware update, and it could also affect integrity and availability.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Affects systems running AMI Aptiov BIOS firmware. Exploitation requires privileged local access to the machine, and the risk is mainly during firmware update processing. The sources do not list affected firmware versions or vendor fixes.
Not affected if no-local-privileged-access
Who cares aptiov, bios, firmware, servers, workstations
Unknown from the sources.
No fix yet, per the sources.
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds write hits unmapped memory. It could also impact Integrity, and Availability.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.