CVE-2025-58772

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS

No CVSS.

References

Link	Resource
https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf

Configurations

No configuration.

History

15 Oct 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) AMI APTIOV contiene vulnerabilidades en la BIOS donde los usuarios pueden causar un 'Desbordamiento de búfer clásico' mediante acceso local. La explotación exitosa de esta vulnerabilidad podría conducir a desbordamientos de búfer, corrupción de memoria y ejecución de código arbitrario, y también impactar la Confidencialidad, la Integridad y la Disponibilidad.

13 Oct 2026, 14:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-13 14:17

Updated : 2026-10-16 15:20

NVD link : CVE-2025-58772

Mitre link : CVE-2025-58772

CVE.ORG link : CVE-2025-58772

JSON object : View

Products Affected

No product.

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2025-58772", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58772", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-13T15:38:48.127909Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "biossecurity@ami.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.2, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "biossecurity@ami.com", "affectedData": [{"vendor": "AMI", "product": "AptioV", "versions": [{"status": "affected", "version": "AptioV_5.0", "lessThan": "AptioV_5.044", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-13T14:17:18.327", "references": [{"url": "https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf", "source": "biossecurity@ami.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "biossecurity@ami.com", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "AMI APTIOV contains vulnerabilities in BIOS where users may cause\u00a0\n\u201cClassic Buffer Overflow\u201d\u00a0by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability."}, {"lang": "es", "value": "AMI APTIOV contiene vulnerabilidades en la BIOS donde los usuarios pueden causar un 'Desbordamiento de b\u00fafer cl\u00e1sico' mediante acceso local. La explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda conducir a desbordamientos de b\u00fafer, corrupci\u00f3n de memoria y ejecuci\u00f3n de c\u00f3digo arbitrario, y tambi\u00e9n impactar la Confidencialidad, la Integridad y la Disponibilidad."}], "lastModified": "2026-10-16T15:20:39.130", "sourceIdentifier": "biossecurity@ami.com"}