CVE-2025-62864
Critical
Description
Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an out-of-bounds write within the UEFI-MM Secure Partition context.
SeverityCritical
CVSS9.8
Exploit probability—
ProductAmperecomputing Ampereone A192-32m Firmware
PublishedDec 16, 2025
First seenDec 16, 2025
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- amperecomputing ampereone_a192-32m_firmware5.4.5.1 or later
- amperecomputing ampereone_a192-26m_firmware5.4.5.1 or later
- amperecomputing ampereone_a160-28m_firmware5.4.5.1 or later
- amperecomputing ampereone_a144-33m_firmware5.4.5.1 or later
- amperecomputing ampereone_a144-26m_firmware5.4.5.1 or later
- amperecomputing ampereone_a96-36m_firmware5.4.5.1 or later
- amperecomputing ampereone_a96-36x_firmware4.4.5.2 or later
- amperecomputing ampereone_a128-34x_firmware4.4.5.2 or later
- amperecomputing ampereone_a144-24x_firmware4.4.5.2 or later
- amperecomputing ampereone_a144-27x_firmware4.4.5.2 or later
- amperecomputing ampereone_a160-28x_firmware4.4.5.2 or later
- amperecomputing ampereone_a192-26x_firmware4.4.5.2, 3.5.9.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amperecomputing ampereone_a192-32m_firmware | v < 5.4.5.1 | 5.4.5.1 |
| amperecomputing ampereone_a192-26m_firmware | v < 5.4.5.1 | 5.4.5.1 |
| amperecomputing ampereone_a160-28m_firmware | v < 5.4.5.1 | 5.4.5.1 |
| amperecomputing ampereone_a144-33m_firmware | v < 5.4.5.1 | 5.4.5.1 |
| amperecomputing ampereone_a144-26m_firmware | v < 5.4.5.1 | 5.4.5.1 |
| amperecomputing ampereone_a96-36m_firmware | v < 5.4.5.1 | 5.4.5.1 |
| amperecomputing ampereone_a96-36x_firmware | v < 4.4.5.2 | 4.4.5.2 |
| amperecomputing ampereone_a128-34x_firmware | v < 4.4.5.2 | 4.4.5.2 |
| amperecomputing ampereone_a144-24x_firmware | v < 4.4.5.2 | 4.4.5.2 |
| amperecomputing ampereone_a144-27x_firmware | v < 4.4.5.2 | 4.4.5.2 |
| amperecomputing ampereone_a160-28x_firmware | v < 4.4.5.2 | 4.4.5.2 |
| amperecomputing ampereone_a192-26x_firmware | v < 4.4.5.2, v < 3.5.9.3 | 4.4.5.2, 3.5.9.3 |
| amperecomputing ampereone_a192-32x_firmware | v < 3.5.9.3 | 3.5.9.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.