CVE-2024-42442 - CVE House
Back to Database
Status published High CVE-2024-42442

Runtime Service Access outside SMRAM

Vulnerability Description

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-42442

Credits & Attribution

No credits recorded in the NVD database.

References

More from AMI

View All →
CVE-2025-58770
TCG2 TPM RT Not Locked Issue
High 7.2
CVE-2025-33045
Legacy Serial Redirection SMRAM Vulnerabilities
High 8.2
CVE-2025-33044
exFat Memory Corruption Issue
Medium 5.8
CVE-2025-33043
SMM buffer Integrity
Medium 5.8
CVE-2025-22834
ThirdPartyVideo SetVariable Vulnerability
Medium 4.2

Affected Vendor

Affected Software

AptioV
Vulnerable Versions:
BKS_5.0

Timeline

Official Publish: November 12th, 2024
Last Modified: November 12th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control