AMI AptioV BIOS (out-of-bounds write): Local out-of-bounds write in firmware causing data corruption and loss

Impact

Local out-of-bounds write in firmware causing data corruption and loss of availability.

Who can reach it

Local low-privilege access.

What to do

AMI ships the fix to OEMs, not to you - obtain the updated BIOS from your board/server vendor (Supermicro, Gigabyte, ASRock Rack, Quanta, Tyan etc.) and flash it. Expect a lag of weeks to months between the AMI advisory and an OEM image for your exact SKU, and expect some SKUs never to get one. Cold reboot per node.

References