AMI AptioV BIOS (out-of-bounds write): Second local out-of-bounds write in the same AptioV advisory

Impact

Second local out-of-bounds write in the same AptioV advisory.

Who can reach it

Local low-privilege access.

What to do

AMI ships the fix to OEMs, not to you - obtain the updated BIOS from your board/server vendor (Supermicro, Gigabyte, ASRock Rack, Quanta, Tyan etc.) and flash it. Expect a lag of weeks to months between the AMI advisory and an OEM image for your exact SKU, and expect some SKUs never to get one. Cold reboot per node.

References