CVE-2026-66332— OOB-Read in FmpCapsuleUpdate
Quick assessment
Affected
AMI AptioV
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
AMI APTIOV 的 BIOS 中存在一个漏洞，允许特权用户通过本地访问触发“越界读取”。成功利用该漏洞可能导致固件更新处理过程中出现拒绝服务，例如：若越界读取访问到未映射的内存区域，可能引发系统崩溃或更新失败。此外，该漏洞还可能对信息的机密性和可用性造成潜在影响。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-66332
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OOB-Read in FmpCapsuleUpdate
Source: CVE Program / CVE List V5
Vulnerability Description
AMI APTIOV contains a vulnerability in BIOS
where a privileged
user may cause the “Out-of-Bound Read” by local
access. Successful exploitation of this vulnerability may lead to a denial of
service during firmware update processing, such as a crash or failed update if
the out-of-bounds read hits unmapped memory. It could also potentially impact Confidentiality and Availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-66332
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-66332
请登录查看更多情报信息。
Other References for CVE-2026-66332 (1)
Same Patch Batch · AMI · 2026-11-10 · 4 CVEs total
| CVE-2026-66334 | 6.8 MEDIUM | OFBD SMM Write Validation Issues |
| CVE-2026-66335 | 6.8 MEDIUM | Heap Overflow in SmiVariable SMM Handler |
| CVE-2026-66333 | 4.8 MEDIUM | OFBD SMM Read Validation Issues |