Vulnerabilidades de Ami

CVE-2026-0893 Média · 5.8 CWE-213 13/10/2026

Uncleared Password Keystrokes Vulnerability

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.

CVE-2025-58774 Alta · 8.3 CWE-805 13/10/2026

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVE-2025-58773 Alta · 7.1 CWE-787 13/10/2026

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVE-2025-58772 Alta · 8.2 CWE-120 13/10/2026

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVE-2025-58771 Alta · 7.1 CWE-190 13/10/2026

UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

CVE-2025-58770 Alta · 8.8 CWE-280 12/12/2025

TCG2 TPM RT Not Locked Issue

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.

CVE-2025-33044 Alta · 7.8 CWE-119 14/10/2025

exFat Memory Corruption Issue

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability.

CVE-2025-22833 Alta · 7.3 CWE-787 14/10/2025

FixupArray Pointer Validation in NTFS

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.

CVE-2025-22832 Alta · 7.8 CWE-787 14/10/2025

Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.

CVE-2025-22831 Alta · 7.8 CWE-787 14/10/2025

Buffer Overflow in NTFS when parsing the VOLUME_NAME

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.

CVE-2024-54085 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-290 11/03/2025

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.