CVE-2025-58771

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS

No CVSS.

References

Link	Resource
https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf

Configurations

No configuration.

History

19 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) AMI APTIOV contiene vulnerabilidades en la BIOS donde los usuarios pueden causar ’desbordamiento de entero o ajuste circular’ mediante acceso local. La explotación exitosa de esta vulnerabilidad podría conducir a desbordamientos de búfer, corrupción de memoria y ejecución de código arbitrario, y también impactar la Confidencialidad, Integridad y Disponibilidad.

13 Oct 2026, 14:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-13 14:17

Updated : 2026-10-19 22:10

NVD link : CVE-2025-58771

Mitre link : CVE-2025-58771

CVE.ORG link : CVE-2025-58771

JSON object : View

Products Affected

No product.

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2025-58771", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58771", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-13T15:38:31.890521Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "biossecurity@ami.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "biossecurity@ami.com", "affectedData": [{"vendor": "AMI", "product": "AptioV", "versions": [{"status": "affected", "version": "AptioV_5.0", "lessThan": "AptioV_5.044", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-13T14:17:18.140", "references": [{"url": "https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf", "source": "biossecurity@ami.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "biossecurity@ami.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause \u201cInteger Overflow or Wraparound\u201d by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability."}, {"lang": "es", "value": "AMI APTIOV contiene vulnerabilidades en la BIOS donde los usuarios pueden causar \u2019desbordamiento de entero o ajuste circular\u2019 mediante acceso local. La explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda conducir a desbordamientos de b\u00fafer, corrupci\u00f3n de memoria y ejecuci\u00f3n de c\u00f3digo arbitrario, y tambi\u00e9n impactar la Confidencialidad, Integridad y Disponibilidad."}], "lastModified": "2026-10-19T22:10:00.130", "sourceIdentifier": "biossecurity@ami.com"}