CVE-2025-33045: ami aptio_v Write-what-where Condition
Vulnerability summary
CVE-2025-33045 is a high (CVSS 8.2) Write-what-where Condition vulnerability in ami aptio_v. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.6% of scored vulnerabilities.
Timeline
- 09-09-2025PublishedVulnerability first disclosed.
- 09-09-2025Last modifiedVulnerability information updated.
Description
APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data writing, and impact Confidentiality, Integrity, and Availability.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
0.00 pp
From 0.16% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-123Write-what-where ConditionAny condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Affected systems
1 vendor · 2 products