CVE-2025-58774

Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in AMI APTIOV BIOS

Publication date: 2026-10-13

Last updated on: 2026-10-15

Assigner: AMI

Description

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-13

EPSS Evaluated

2026-10-18

NVD

CVE-2025-58774

EUVD

EUVD-2025-211078

Affected Vendors & Products

Vendor	Product	Version / Range
AMI	AptioV	AptioV_5.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-805	The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.

Attack-Flow Graph

Executive Summary

This vulnerability in AMI APTIOV BIOS allows local users to exploit a buffer access with incorrect length value, leading to buffer overflows, memory corruption, and arbitrary code execution. It impacts confidentiality, integrity, and availability of the system.

Detection Guidance

This vulnerability is specific to AMI APTIOV BIOS and requires local access to exploit. Detection primarily involves checking BIOS versions and configurations rather than network commands. Contact AMI support or check system logs for BIOS-related errors. No direct commands are provided in the context for detection.

Impact Analysis

Exploitation could allow attackers with local access to execute arbitrary code, potentially gaining control over the system. This may lead to data theft, system crashes, or unauthorized modifications.

Compliance Impact

This vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, which may result in unauthorized access to sensitive data. Such impacts could potentially violate confidentiality and integrity requirements under GDPR and HIPAA, depending on the system's use case and data processed.

Mitigation Strategies

Update the AMI APTIOV BIOS to the latest version provided by AMI. Disable unnecessary BIOS features and restrict physical access to systems to prevent local exploitation.

Hi! I’m here to help you understand CVE-2025-58774. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70