CVE-2024-42444 — TOCTOU Race Condition between DMA and SMM

CVE-2024-42444

TOCTOU Race Condition between DMA and SMM PUBLISHED

Description (CNA)

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device.

Affected (CNA)

Vendor / product	Versions
AMI / AptioV	affected BKS_5.0 through BKS_5.38

CWE

CWE-367

References

https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025001.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.