{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-58774",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T17:33:15.620822Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T19:14:58.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AptioV",
          "vendor": "AMI",
          "versions": [
            {
              "lessThan": "AptioV_5.043",
              "status": "affected",
              "version": "AptioV_5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAMI APTIOV contains vulnerabilities\nin BIOS where users may cause \u201cBuffer Access with Incorrect Length\nValue\u201d by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability.\u003c/p\u003e"
            }
          ],
          "value": "AMI APTIOV contains vulnerabilities\nin BIOS where users may cause \u201cBuffer Access with Incorrect Length\nValue\u201d by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-805",
              "description": "CWE-805 Buffer access with incorrect length value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T14:02:30.940Z",
        "orgId": "7e9044f1-7f56-4c38-8864-c0c7302263d6",
        "shortName": "AMI"
      },
      "references": [
        {
          "url": "https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "UEFI OOB Write and Buffer Overflow Vulnerabilities",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e9044f1-7f56-4c38-8864-c0c7302263d6",
    "assignerShortName": "AMI",
    "cveId": "CVE-2025-58774",
    "datePublished": "2026-10-13T14:02:30.940Z",
    "dateReserved": "2025-09-04T20:15:30.290Z",
    "dateUpdated": "2026-10-15T19:14:58.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"7e9044f1-7f56-4c38-8864-c0c7302263d6\", \"shortName\": \"AMI\", \"dateUpdated\": \"2026-10-13T14:02:30.940Z\"}, \"title\": \"UEFI OOB Write and Buffer Overflow Vulnerabilities\", \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-805\", \"description\": \"CWE-805 Buffer access with incorrect length value\", \"type\": \"CWE\"}]}], \"affected\": [{\"vendor\": \"AMI\", \"product\": \"AptioV\", \"versions\": [{\"status\": \"affected\", \"version\": \"AptioV_5.0\", \"lessThan\": \"AptioV_5.043\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"AMI APTIOV contains vulnerabilities\\nin BIOS where users may cause \\u201cBuffer Access with Incorrect Length\\nValue\\u201d by local access. Successful exploitation of this vulnerability could\\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\\nalso impact Confidentiality, Integrity, and Availability.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eAMI APTIOV contains vulnerabilities\\nin BIOS where users may cause \\u201cBuffer Access with Incorrect Length\\nValue\\u201d by local access. Successful exploitation of this vulnerability could\\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\\nalso impact Confidentiality, Integrity, and Availability.\u003c/p\u003e\"}]}], \"references\": [{\"url\": \"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf\"}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV4_0\": {\"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"subConfidentialityImpact\": \"LOW\", \"vulnIntegrityImpact\": \"LOW\", \"subIntegrityImpact\": \"LOW\", \"vulnAvailabilityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"HIGH\", \"exploitMaturity\": \"NOT_DEFINED\", \"Safety\": \"NOT_DEFINED\", \"Automatable\": \"NOT_DEFINED\", \"Recovery\": \"NOT_DEFINED\", \"valueDensity\": \"NOT_DEFINED\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"version\": \"4.0\", \"baseSeverity\": \"HIGH\", \"baseScore\": 8.3, \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H\"}}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"x_generator\": {\"engine\": \"Vulnogram 1.0.5\"}}, \"adp\": [{\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-58774\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-15T17:33:15.620822Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-15T19:11:47.551Z\"}, \"title\": \"CISA ADP Vulnrichment\"}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-58774\", \"assignerOrgId\": \"7e9044f1-7f56-4c38-8864-c0c7302263d6\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"AMI\", \"dateReserved\": \"2025-09-04T20:15:30.290Z\", \"datePublished\": \"2026-10-13T14:02:30.940Z\", \"dateUpdated\": \"2026-10-15T19:14:58.112Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}