CVE-2025-58774: UEFI OOB Write and Buffer Overflow Vulnerabilities
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using AMI Aptio V firmware are in scope. Exploitation requires local access and low privileges, so remote-only attackers are not described as able to trigger it directly.
What level of access does an attacker need?
An attacker needs local access and low privileges. No user interaction or additional attack conditions are identified in the CVSS vector.
What could successful exploitation allow?
Successful exploitation could cause buffer overflows and memory corruption, potentially leading to arbitrary code execution. Confidentiality, integrity, and availability may all be affected, including high availability impact.