CVE-2024-33656 — Memory Leak in SmmComuptrace Module

Back Back to CVE browser

HIGH

Memory Leak in SmmComuptrace Module

Published Aug 21, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.16%

Description

The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms

Affected products

Vendor AMI Product AptioV Default
unaffected
- Version
  BKS_5.0
  Status
  affected
  Constraints
  <=5.36

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

AMI

AptioV

unaffected

Version	Status	Constraints
BKS_5.0	affected	<=5.36

Vendor Ami Product Aptio V Default
unaffected
- Version
  bks_5.0
  Status
  affected
  Constraints
  <=5.36

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ami

Aptio V

unaffected

Version	Status	Constraints
bks_5.0	affected	<=5.36

Remediation

No remediation recorded yet.

Metrics

0.16% 0.00162

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00162

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.16% (0.00162)	4.77th	v5 (v2026.06.15)
Jun 15, 2026	0.16% (0.00162)	5.72th	v5 (v2026.06.15)
Mar 17, 2025	0.04% (0.00039)	8.66th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Aug 22, 2024	0.04% (0.00043)	9.54th	v3 (v2023.03.01)