PT-2024-11550 · Ami · Ami Ntfs Driver

Msuhanov · Published 2024-03-13 · Updated 2024-12-12 · CVE-2022-29974

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AMI NTFS driver version 1.0.0

Description The AMI NTFS driver has a buffer overflow issue. This driver is used in certain devices, such as those from ASUS. The issue was reported and fixed by AMI in late 2021, but as of now, the fix may not be fully incorporated into supported products by downstream vendors.

Recommendations For AMI NTFS driver version 1.0.0, update to a version that includes the fix for the buffer overflow issue, as the fix was implemented by AMI in late 2021 or early 2022.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-29974

Affected Products

Ami Ntfs Driver

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-29974 · Security Note
• https://t.me/cvedetector/12445 · Telegram Post
• https://twitter.com/errno_fail/status/1866543025721082048 · Twitter Post
• https://ami.com · Note
• https://dfir.ru/2024/12/09/multiple-vulnerabilities-in-ami-file-system-drivers · Note
• https://twitter.com/errno_fail/status/1767963072436539826 · Twitter Post
• https://twitter.com/CVEnew/status/1866432949987549436 · Twitter Post