CVE-2023-39538

CVE-2023-39538 concerns AMI AptioV BIOS where an attacker with local access can trigger an unrestricted upload of a BMP Logo file deemed dangerous, potentially affecting confidentiality, integrity, and availability. The vulnerability stems from BMP logo handling in AMI AptioV BIOS and has been di...

CVE-2023-39539

CVE-2023-39539 corresponds to a vulnerability in AMI AptioV BIOS where a user with local access can trigger an unrestricted upload of a PNG logo file (via the BMP Logo Handler) with a dangerous type. The underlying issue is described as a local elevation/impactful modification of boot-time/logo h...

CVE-2023-34470

AMI AptioV BIOS contains an access-control vulnerability allowing an attacker on the local network to potentially compromise confidentiality, integrity, and availability. The root cause is an improper access-control policy in the BIOS. The CVE entry notes impact but does not provide concrete expl...

CVE-2023-34469

The CVE-2023-34469 entry refers to AMI AptioV BIOS with an improper access control issue over the physical network, leading to a potential loss of confidentiality. Documents consistently describe the vulnerability as BIOS-related, affecting BIOS/firmware behavior, but do not provide concrete expl...

CVE-2023-39537

AMI AptioV BIOS contains a vulnerability where improper input validation over a local network can lead to loss of confidentiality, integrity, and availability. Affected: AMI AptioV BIOS firmware (TCG2 context). Root cause: improper input validation in BIOS as described in CVE-2023-39537. Impact: ...

CVE-2023-39535

CVE-2023-39535 concerns AMI AptioV BIOS with a vulnerability due to improper input validation that can be triggered over a local network. Affected: AMI AptioV BIOS firmware (BIOS-level component). Root cause: input validation weakness in the BIOS enabling a local network attacker to potentially c...

CVE-2023-39536

AMI AptioV BIOS contains an improper input validation vulnerability that can be exploited over a local network, potentially impacting confidentiality, integrity, and availability. Affected software: AMI AptioV BIOS. Root cause: input validation issue in BIOS handling over LAN. Exploitation status...

CVE-2025-22830

The CVE-2025-22830 entry concerns AMI Aptiov BIOS whoseRace Condition occurs when a user with local access can trigger a vulnerability in the BIOS. The root cause is a local race condition that can lead to resource exhaustion, with impacts stated as Confidentiality, Integrity, and Availability be...