AMI AptioV BIOS (unchecked buffer copy): Buffer copy without size checking in firmware leading to arbitrary code

Impact

Buffer copy without size checking in firmware leading to arbitrary code execution.

Who can reach it

Local low-privilege access with user interaction.

What to do

AMI ships the fix to OEMs, not to you - obtain the updated BIOS from your board/server vendor (Supermicro, Gigabyte, ASRock Rack, Quanta, Tyan etc.) and flash it. Expect a lag of weeks to months between the AMI advisory and an OEM image for your exact SKU, and expect some SKUs never to get one. Cold reboot per node.

References