CVE-2025-58773: UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using AMI Aptio V BIOS are in scope. Exploitation requires local access and high privileges, so the primary concern is an attacker or malicious insider who already has significant access to the affected machine.
What access does an attacker need to exploit it?
The CVSS vector specifies local attack access, high privileges, and no user interaction. The attack complexity is rated high, indicating exploitation is not expected to be straightforward even after the required access is obtained.
What could a successful exploit do?
Successful exploitation could cause an out-of-bounds write, buffer overflow, and memory corruption, potentially resulting in arbitrary code execution. It can affect confidentiality, integrity, and availability.