AMI APTIOV firmware contains a Buffer Access with Incorrect Length Value flaw that can be triggered by local users. Exploitation can cause buffer overflows and memory corruption, allowing the attacker to run arbitrary code. The vulnerability compromises confidentiality, integrity, and availability of the affected system. The weakness aligns with CWE-805, which focuses on incorrect bounds checks and buffer overflows.

The flaw affects devices using AMI APTIOV firmware. Specific model or version information is not listed in the advisory; any system running APTIOV without the latest update is at risk. The vulnerability is triggered through local access to the firmware, so any user with physical access to the hardware or the ability to modify firmware settings can exploit it.

The CVSS score of 8.3 indicates a high impact scoring. The EPSS score is not available, but the advisory does not list this vulnerability in the CISA KEV catalog, suggesting no confirmed exploit activity is known at the time of writing. Because it is a local flaw that requires firmware modification, the likelihood of exploitation depends on the presence of a well‑trained attacker with physical or administrative access. If exploited, the attacker can gain full control of the machine, leading to a complete system compromise.