CVE-2025-58771

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-58772

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause  “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-58773

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause  "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-58774

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2026-0893

Uncleared Password Keystrokes Vulnerability

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2026-33197

BDS Module Bypass Secure Boot Advisory

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2023-39538

Failure when uploading a Logo image file

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. 

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2024-33657

Smm Callout in SmmComputrace Module

This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2024-33656

Memory Leak in SmmComuptrace Module

The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-58770

TCG2 TPM RT Not Locked Issue

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2023-39539

Failure when uploading a Logo image file

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. 

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-33043

SMM buffer Integrity

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-33044

exFat Memory Corruption Issue

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-22833

FixupArray Pointer Validation in NTFS

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-22832

Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2025-22831

Buffer Overflow in NTFS when parsing the VOLUME_NAME

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2024-33659

BiosGuard Buffer Overflow and TOCTOU Vulnerability

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, and Availability.

CVSS 4.0 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2024-42444

TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2024-33660

Potential Firmware update without integrity check

An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V

CVE-2024-42442

Runtime Service Access outside SMRAM

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Ami

Products

Aptio V