CVE-2025-58771: UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using AMI Aptio V firmware are in scope. Exploitation requires local access and high privileges, so this is primarily relevant where an attacker can already execute code locally with elevated permissions.
What access does an attacker need to exploit it?
The CVSS vector indicates local attack access, high attack complexity, no user interaction, and high privileges required. The supplied information does not indicate that remote or unauthenticated exploitation is possible.
What could successful exploitation allow?
Successful exploitation could trigger integer overflow or wraparound conditions leading to buffer overflows and memory corruption. The stated impact includes arbitrary code execution and effects on confidentiality, integrity, and availability.