Out-of-Bounds Write in Intel AMT and Standard Manageability Firmware

CVE-2025-32008

What is CVE-2025-32008?

This vulnerability involves an out-of-bounds write within the firmware for Intel Active Management Technology (AMT) and Intel Standard Manageability. A network adversary can exploit this vulnerability to launch a denial of service attack. The attack is possible without requiring authentication and involves low complexity, allowing an adversary to potentially disrupt the availability of affected systems. Intriguingly, this exploit does not require user interaction and may leverage network access to execute successfully. The ramifications include a potential impact on system availability.

References