CVE-2026-33197
HighCVSS 8.7Summary
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the 'Incomplete List of Disallowed Inputs' by local access. Successful exploitation may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.
Risk Assessment
A person with local access and privileges may be able to execute arbitrary code in the BIOS, potentially leading to full system compromise and persistent security breach.
Recommendation
Apply patches provided by AMI for APTIOV. Restrict physical and local access to systems running the vulnerable BIOS.
Other vulnerabilities in AMI APTIOV
See all- CVE-2026-0893Medium
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause "Exposure of Sensitive Information to an Unauthorized Actor" by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.
- CVE-2025-58774High
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
- CVE-2025-58773High
AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write" by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
- CVE-2025-58772High
AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger a classic buffer overflow. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.
- CVE-2025-58771High
AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger an integer overflow or wraparound. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.
Original NVD description (English source)
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS