where a privileged
user may cause the “Out-of-Bound Read” by local
access. Successful exploitation of this vulnerability may lead to a denial of
service during firmware update processing, such as a crash or failed update if
the out-of-bounds read hits unmapped memory. It could also potentially impact Confidentiality and Availability.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| AMI | AptioV | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Tue, 10 Nov 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Out-of-Bound Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also potentially impact Confidentiality and Availability. | |
| Title | OOB-Read in FmpCapsuleUpdate | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: AMI
Published:
Updated: 2026-11-10T16:21:27.156Z
Reserved: 2026-07-24T21:31:28.218Z
Link: CVE-2026-66332
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-10T17:17:46.453
Modified: 2026-11-10T17:17:46.453
Link: CVE-2026-66332
Redhat
No data.
OpenCVE Enrichment
No data.