CVE-2025-58774
HighCVSS 8.3Summary
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Risk Assessment
The vulnerability may allow a local attacker to execute arbitrary code in the BIOS, potentially leading to full system compromise and permanent hardware damage.
Recommendation
It is recommended to update the BIOS to the latest version provided by the vendor and restrict physical access to systems.
Other vulnerabilities in AMI APTIOV
See all- CVE-2026-0893Medium
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause "Exposure of Sensitive Information to an Unauthorized Actor" by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.
- CVE-2025-58773High
AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write" by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
- CVE-2025-58772High
AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger a classic buffer overflow. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.
- CVE-2025-58771High
AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger an integer overflow or wraparound. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.
- CVE-2026-33197High
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the 'Incomplete List of Disallowed Inputs' by local access. Successful exploitation may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.
Original NVD description (English source)
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS