Skip to main content

Aptio V CVE-2025-33044

MEDIUM
Buffer Overflow (CWE-119)
2025-10-14 biossecurity@ami.com
Buffer Overflow Aptio V Ami
5.9
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 26, 2026 - 18:48 vuln.today
CVE Published
Oct 14, 2025 - 14:15 cve.org
MEDIUM 5.9

DescriptionCVE.org

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability.

AnalysisAI

We need to produce a JSON object with all the specified fields. We'll synthesize the given data.

First, extract the key info:

  • CVE-2025-33044
  • Description: "APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability."
  • CVSS Score: 5.9 (CVSS:4.0 vector given)
  • CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
  • EPSS: 0.05% (17th percentile) - low.
  • KEV status? Not mentioned, assume NO.
  • POC? Not mentioned, assume NO.
  • Tags: Buffer Overflow, Aptio V
  • CPE: cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*
  • References: [nvd] https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025008.pdf (AMI Security Advisory)
  • Reported by: biossecurity@ami.com (so vendor provided info)

Product name: "Aptio V" (UEFI BIOS/firmware from AMI). So product_name: "Aptio V". Short, 3 words.

Summary: Synthesize original, do not paraphrase. Start with impact verb: "Memory corruption in AMI Aptio V BIOS allows local attackers to compromise system integrity and availability." then explain what and who affected. Mention that it's a buffer overflow (improper bounds check). Attacker with local access (as described). No KEV, no POC mentioned. EPSS low. So summary: "Memory corruption in AMI Aptio V BIOS allows local attackers to compromise system integrity and availability. The vulnerability, caused by improper bounds checking, can be exploited by local means to cause memory corruption, impacting integrity and availability. No active exploitation or public exploit has been reported, and EPSS indicates a low probability of widespread exploitation."

Technical context: Underlying technology: UEFI BIOS firmware. CWE-119 relates to memory buffer operations. CPE shows AMI Aptio V is the product. So we can describe: AMI Aptio V is a UEFI BIOS firmware u

More in Aptio V

View all
CVE-2022-40250 HIGH POC
8.8 Sep 20

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in Syste
CVE-2022-40262 HIGH POC
8.2 Sep 20

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages
CVE-2022-40261 HIGH POC
8.2 Sep 20

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in Syste
CVE-2022-26873 HIGH POC
8.2 Sep 20

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages
CVE-2024-42442 HIGH
8.8 Nov 12

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations wit
CVE-2025-33045 HIGH
8.2 Sep 09

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure
CVE-2024-33657 HIGH
7.8 Aug 21

This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stac
CVE-2024-33656 HIGH
7.8 Aug 21

The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. Rated

CVE-2023-39539 HIGH
7.8 Dec 06

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with danger
CVE-2023-39538 HIGH
7.8 Dec 06

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with danger
CVE-2023-39537 HIGH
7.8 Nov 14

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network
CVE-2023-39536 HIGH
7.8 Nov 14

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network

Same weakness CWE-119 – Buffer Overflow

View all
CVE-2020-0796 CRITICAL POC
10.0
CVE-2017-11882 HIGH POC
7.8
CVE-2014-6332 HIGH POC
8.8
CVE-2015-2426 HIGH POC
8.8
CVE-2013-3918 HIGH POC
8.8
CVE-2023-4966 HIGH POC
7.5
CVE-2017-11774 HIGH POC
7.8
CVE-2013-3660 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Share

CVE-2025-33044 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy