An integer overflow or wrap‑around flaw in AMI AptioV firmware allows a local user to trigger a buffer overflow, corrupt memory, and ultimately execute arbitrary code. The vulnerability is a classic integer overflow (CWE‑190) that compromises confidentiality, integrity, and availability of the affected system.

The flaw is present in unnamed versions of the AMI AptioV UEFI BIOS firmware. Any system running this firmware and permitting local access to the firmware configuration is susceptible to exploitation.

The CVSS score of 7.1 signals a high severity of the vulnerability, while the EPSS score is not available, indicating no recent publicly disclosed exploitation data. The flaw is not listed in CISA’s KEV catalog, suggesting no known large‑scale attacks. Exploitation requires local physical or privileged access to the machine’s UEFI settings to trigger the integer overflow and trigger the buffer overflow, making the attack vector local but potentially feasible for anyone able to reboot or access the BIOS interface.