{"id":"CVE-2025-58771","state":"PUBLISHED","title":"UEFI OOB Write and Buffer Overflow Vulnerabilities","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","publishedAt":"2026-10-13T14:01:00.462Z","updatedAt":"2026-10-13T15:49:47.731Z","severity":{"score":7.1,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","source":"AMI"},"assigner":"AMI","products":["AMI AptioV"],"affected":[{"vendor":"AMI","product":"AptioV","defaultStatus":"unaffected","versions":[{"version":"AptioV_5.0","status":"affected","lessThan":"AptioV_5.044","versionType":"custom"}]}],"references":["https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf"],"weaknesses":["CWE-190"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/58xxx/CVE-2025-58771.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-58771","state":"PUBLISHED","datePublished":"2026-10-13T14:01:00.462Z","dateUpdated":"2026-10-13T15:49:47.731Z","assignerShortName":"AMI","assignerOrgId":"7e9044f1-7f56-4c38-8864-c0c7302263d6","dateReserved":"2025-09-04T20:15:30.289Z"},"containers":{"cna":{"title":"UEFI OOB Write and Buffer Overflow Vulnerabilities","descriptions":[{"lang":"en","value":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability."}],"affected":[{"vendor":"AMI","product":"AptioV","defaultStatus":"unaffected","versions":[{"version":"AptioV_5.0","status":"affected","lessThan":"AptioV_5.044","versionType":"custom"}]}],"references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"LOW","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":7.1,"vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","lang":"en","description":"CWE-190 Integer overflow or wraparound","type":"CWE"}]}],"providerMetadata":{"shortName":"AMI","orgId":"7e9044f1-7f56-4c38-8864-c0c7302263d6","dateUpdated":"2026-10-13T14:01:00.462Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-58771","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-13T15:38:31.890521Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-13T15:49:47.731Z"}}]}}}