Critical · published December 16, 2025
🔥 An incorrect SMC call could lead to serious out-of-bounds writes in your UEFI-MM Secure Partition! Think of it like ordering a custom cake but accidentally sending instructions for a giant pie instead — the kitchen could end up making a mess, and all those ingredients could spill over into the wrong places! If exploited, this vulnerability could allow attackers to write data outside its intended boundaries, potentially compromising the entire UEFI environment. This could lead to unauthorized access or manipulation of critical system components, putting your devices at risk of complete control or failure. That's absolutely devastating!
Think of it like ordering a custom cake but accidentally sending instructions for a giant pie instead — the kitchen could end up making a mess, and all those ingredients could spill over into the wrong places! This flaw resides in the UEFI-MM MMCommunicate service of AmpereOne devices, where an improperly formed call can trigger an out-of-bounds write within the Secure Partition context, opening the door for memory corruption and potential exploits.
If exploited, this vulnerability could allow attackers to write data outside its intended boundaries, potentially compromising the entire UEFI environment. This could lead to unauthorized access or manipulation of critical system components, putting your devices at risk of complete control or failure. That's absolutely devastating! To remediate this, patch your AmpereOne AC03 devices to version 3.5.9.3 or higher, AC04 devices to version 4.4.5.2 or higher, and M devices to version 5.4.5.1 or higher. It's critical to stay up-to-date with firmware to ensure your systems remain secure! You've got this! Follow these steps, and you'll fortify your defenses in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| amperecomputing/ampereone_a192-32m_firmware | < 5.4.5.1 | 5.4.5.1 |
| amperecomputing/ampereone_a192-26m_firmware | < 5.4.5.1 | 5.4.5.1 |
| amperecomputing/ampereone_a160-28m_firmware | < 5.4.5.1 | 5.4.5.1 |
| amperecomputing/ampereone_a144-33m_firmware | < 5.4.5.1 | 5.4.5.1 |
| amperecomputing/ampereone_a144-26m_firmware | < 5.4.5.1 | 5.4.5.1 |
| amperecomputing/ampereone_a96-36m_firmware | < 5.4.5.1 | 5.4.5.1 |
| amperecomputing/ampereone_a96-36x_firmware | < 4.4.5.2 | 4.4.5.2 |
| amperecomputing/ampereone_a128-34x_firmware | < 4.4.5.2 | 4.4.5.2 |
| amperecomputing/ampereone_a144-24x_firmware | < 4.4.5.2 | 4.4.5.2 |
| amperecomputing/ampereone_a144-27x_firmware | < 4.4.5.2 | 4.4.5.2 |
| amperecomputing/ampereone_a160-28x_firmware | < 4.4.5.2 | 4.4.5.2 |
| amperecomputing/ampereone_a192-26x_firmware | < 4.4.5.2 | 4.4.5.2 |
| amperecomputing/ampereone_a192-26x_firmware | < 3.5.9.3 | 3.5.9.3 |
| amperecomputing/ampereone_a192-32x_firmware | < 3.5.9.3 | 3.5.9.3 |