Description
AMI APTIOV contains vulnerabilities in BIOS where users may cause  "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Published: 2026-10-13
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: Arbitrary code execution via local UEFI exploitation
Action: Immediate Patch
AI Analysis

Impact

An out‑of‑bounds write in AMI AptioV BIOS allows a local attacker to corrupt memory and trigger a buffer overflow. This can lead to execution of arbitrary code and compromise the confidentiality, integrity, and availability of the affected system.

Affected Systems

The vulnerability affects the AMI AptioV BIOS firmware. No specific version range is provided, so administrators should verify whether their current firmware may be impacted by reviewing the manufacturer's advisories.

Risk and Exploitability

The CVSS score of 7.1 indicates high severity. EPSS data is unavailable, so the likelihood of exploitation could not be quantified. The vulnerability is not listed in CISA's KEV catalog. It is inferred that the attack requires local access to the machine’s UEFI interface, and successful exploitation would allow an attacker to execute code with firmware‑level privileges.

Generated by OpenCVE AI on October 13, 2026 at 18:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the device to the latest AMI AptioV firmware version that addresses the out‑of‑bounds write and buffer overflow vulnerabilities.
  • Enable Secure Boot and disable booting from external media to reduce the risk of an attacker using removable devices to load malicious code during boot.
  • Implement strict physical security controls to prevent unauthorised users from gaining local access to the hardware and tampering with its firmware settings.

Generated by OpenCVE AI on October 13, 2026 at 18:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description AMI APTIOV contains vulnerabilities in BIOS where users may cause  "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.
Title UEFI OOB Write and Buffer Overflow Vulnerabilities
Weaknesses CWE-787
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: AMI

Published:

Updated: 2026-10-13T15:49:47.466Z

Reserved: 2025-09-04T20:15:30.289Z

Link: CVE-2025-58773

cve-icon Vulnrichment

Updated: 2026-10-13T15:40:58.254Z

cve-icon NVD

Status : Received

Published: 2026-10-13T14:17:18.460

Modified: 2026-10-13T16:17:08.790

Link: CVE-2025-58773

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T19:00:06Z

Weaknesses