CVE-2026-66335 · Infrastructure
NO FIX YET
AMI Aptio BIOS firmware has a heap-based buffer overflow that a privileged local user can trigger. Successful exploitation may crash firmware update processing or failed updates, and could also affect confidentiality, integrity and availability.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Systems running AMI Aptio firmware, which the sources do not enumerate by board or version. Exposure requires local access with privileges already held, so remote-only systems are less exposed. The sources do not say which configurations can be skipped.
Not affected if remote-only-access
Who cares ami-aptio, bios, firmware, servers, workstations
Unknown from the sources.
No fix yet, per the sources.
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds write hits unmapped memory. It could also impact Confidentiality, Integrity, and Availability.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.