Description
AMI APTIOV contains vulnerabilities in BIOS where users may cause 
“Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Published: 2026-10-13
Score: 8.2 High
EPSS: n/a
KEV: No
Impact: Arbitrary code execution via local privilege escalation
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a classic buffer overflow in AMI AptioV BIOS firmware that may be triggered by a local user. A successful attack corrupts memory, leading to arbitrary code execution. The impact may compromise confidentiality, integrity, and availability of the affected system.

Affected Systems

The affected systems are machines running AMI AptioV BIOS firmware. No specific firmware versions are listed, but any installation of AMI AptioV is vulnerable as the advisory does not exclude particular releases.

Risk and Exploitability

The CVSS score of 8.2 indicates a high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local; a local attacker with sufficient access to the machine can exploit the overflow to gain system-level code execution.

Generated by OpenCVE AI on October 13, 2026 at 18:11 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download the latest AMI AptioV BIOS firmware from AMI’s official website and verify its digital signature or checksum before use.
  • Flash the verified firmware onto the target system following AMI’s documented BIOS update procedure, ensuring the device boots correctly afterwards.
  • If an immediate firmware update is not possible, consider disabling all unused BIOS features that contain the vulnerable code to reduce risk until a patch can be applied.

Generated by OpenCVE AI on October 13, 2026 at 18:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Title UEFI OOB Write and Buffer Overflow Vulnerabilities
Weaknesses CWE-120
References
Metrics cvssV4_0

{'score': 8.2, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: AMI

Published:

Updated: 2026-10-13T15:49:47.603Z

Reserved: 2025-09-04T20:15:30.289Z

Link: CVE-2025-58772

cve-icon Vulnrichment

Updated: 2026-10-13T15:41:00.735Z

cve-icon NVD

Status : Received

Published: 2026-10-13T14:17:18.327

Modified: 2026-10-13T16:17:08.680

Link: CVE-2025-58772

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T18:15:17Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')