CVE-2025-58774

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS

No CVSS.

References

Link	Resource
https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf

Configurations

No configuration.

History

15 Oct 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) AMI APTIOV contiene vulnerabilidades en la BIOS donde los usuarios pueden causar 'Acceso a búfer con valor de longitud incorrecto' mediante acceso local. La explotación exitosa de esta vulnerabilidad podría conducir a desbordamientos de búfer, corrupción de memoria y ejecución de código arbitrario, y también impactar en la Confidencialidad, Integridad y Disponibilidad.

13 Oct 2026, 14:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-13 14:17

Updated : 2026-10-16 15:20

NVD link : CVE-2025-58774

Mitre link : CVE-2025-58774

CVE.ORG link : CVE-2025-58774

JSON object : View

Products Affected

No product.

CWE

CWE-805

Buffer Access with Incorrect Length Value

{"id": "CVE-2025-58774", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58774", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T17:33:15.620822Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "biossecurity@ami.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.3, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "biossecurity@ami.com", "affectedData": [{"vendor": "AMI", "product": "AptioV", "versions": [{"status": "affected", "version": "AptioV_5.0", "lessThan": "AptioV_5.043", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-13T14:17:18.580", "references": [{"url": "https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf", "source": "biossecurity@ami.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "biossecurity@ami.com", "description": [{"lang": "en", "value": "CWE-805"}]}], "descriptions": [{"lang": "en", "value": "AMI APTIOV contains vulnerabilities\nin BIOS where users may cause \u201cBuffer Access with Incorrect Length\nValue\u201d by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability."}, {"lang": "es", "value": "AMI APTIOV contiene vulnerabilidades en la BIOS donde los usuarios pueden causar 'Acceso a b\u00fafer con valor de longitud incorrecto' mediante acceso local. La explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda conducir a desbordamientos de b\u00fafer, corrupci\u00f3n de memoria y ejecuci\u00f3n de c\u00f3digo arbitrario, y tambi\u00e9n impactar en la Confidencialidad, Integridad y Disponibilidad."}], "lastModified": "2026-10-16T15:20:39.130", "sourceIdentifier": "biossecurity@ami.com"}