{"id":"CVE-2025-58771","aliases":["EUVD-2025-211075","GHSA-fw3j-xvmr-h427"],"status":"published","title":"UEFI OOB Write and Buffer Overflow Vulnerabilities","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","severity":{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00112,"percentile":0.01375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2026-10-13T14:01:00Z","modified":"2026-10-19T22:10:00Z","products":[{"vendor":"ami","product":"aptiov"}],"references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58771"},{"url":"https://github.com/advisories/GHSA-fw3j-xvmr-h427"}],"sources":{"cve":[{"id":"CVE-2025-58771","title":"UEFI OOB Write and Buffer Overflow Vulnerabilities","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","status":"published","published":"2026-10-13T14:01:00.462Z","modified":"2026-10-13T15:49:47.731Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:37.351404Z"}],"euvd":[{"id":"EUVD-2025-211075","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","status":"published","published":"2026-10-13T14:01:00Z","modified":"2026-10-13T15:49:47Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","level":"high"}],"updated_at":"2026-11-02T17:27:20.397021Z"}],"ghsa":[{"id":"GHSA-fw3j-xvmr-h427","title":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound...","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","status":"published","published":"2026-10-13T15:32:20Z","modified":"2026-10-13T15:32:22Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:13:10.715475Z"}],"nvd":[{"id":"CVE-2025-58771","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","status":"published","published":"2026-10-13T14:17:18.14Z","modified":"2026-10-19T22:10:00.13Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:03.20248Z"}]}}