{"schemaVersion":3,"id":"CVE-2025-58774","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"AMI APTIOV contains vulnerabilities\nin BIOS where users may cause “Buffer Access with Incorrect Length\nValue” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.","dates":{"published":"2026-10-13T14:02:30.940Z","modified":"2026-10-15T19:14:58.112Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.3,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00124,"percentile":0.01965,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00124,"percentile":0.01965}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00124,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00124,"percentile":0.01965}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-805","name":"Buffer Access with Incorrect Length Value","description":"The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/805.html"}],"affected":[{"vendor":"ami","product":"aptiov","name":"AptioV","label":"aptiov","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ AptioV_5.0, < AptioV_5.043","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ AptioV_5.0, < AptioV_5.043","eol":null,"hubHref":"/vendor/ami/aptiov"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","label":"go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","hostname":"go.ami.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-13T14:02:30.940Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-15T19:14:58.112Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T04:06:52.368Z","stale":false,"partial":false}}