{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2025-58774",
        "assignerOrgId": "7e9044f1-7f56-4c38-8864-c0c7302263d6",
        "state": "PUBLISHED",
        "assignerShortName": "AMI",
        "dateReserved": "2025-09-04T20:15:30.290Z",
        "datePublished": "2026-10-13T14:02:30.940Z",
        "dateUpdated": "2026-10-15T19:14:58.112Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "7e9044f1-7f56-4c38-8864-c0c7302263d6",
                "shortName": "AMI",
                "dateUpdated": "2026-10-13T14:02:30.940Z"
            },
            "title": "UEFI OOB Write and Buffer Overflow Vulnerabilities",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-805",
                            "description": "CWE-805 Buffer access with incorrect length value",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "AMI",
                    "product": "AptioV",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "AptioV_5.0",
                            "lessThan": "AptioV_5.043",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "AMI APTIOV contains vulnerabilities\nin BIOS where users may cause “Buffer Access with Incorrect Length\nValue” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>AMI APTIOV contains vulnerabilities\nin BIOS where users may cause “Buffer Access with Incorrect Length\nValue” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.</p>"
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf"
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV4_0": {
                        "attackVector": "LOCAL",
                        "attackComplexity": "LOW",
                        "attackRequirements": "NONE",
                        "privilegesRequired": "LOW",
                        "userInteraction": "NONE",
                        "vulnConfidentialityImpact": "LOW",
                        "subConfidentialityImpact": "LOW",
                        "vulnIntegrityImpact": "LOW",
                        "subIntegrityImpact": "LOW",
                        "vulnAvailabilityImpact": "HIGH",
                        "subAvailabilityImpact": "HIGH",
                        "exploitMaturity": "NOT_DEFINED",
                        "Safety": "NOT_DEFINED",
                        "Automatable": "NOT_DEFINED",
                        "Recovery": "NOT_DEFINED",
                        "valueDensity": "NOT_DEFINED",
                        "vulnerabilityResponseEffort": "NOT_DEFINED",
                        "providerUrgency": "NOT_DEFINED",
                        "version": "4.0",
                        "baseSeverity": "HIGH",
                        "baseScore": 8.3,
                        "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H"
                    }
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "x_generator": {
                "engine": "Vulnogram 1.0.5"
            }
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "id": "CVE-2025-58774",
                                "role": "CISA Coordinator",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "total"
                                    }
                                ],
                                "version": "2.0.3",
                                "timestamp": "2026-10-15T17:33:15.620822Z"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2026-10-15T19:14:58.112Z"
                }
            }
        ]
    }
}