CVE-2025-58771: AMI APTIOV integer overflow in BIOS

CVE-2025-58771 · Severity: info · Published 2026-10-13

AMI APTIOV is firmware that runs during system startup and manages low-level hardware functions. An integer overflow vulnerability in the BIOS code could allow a local attacker to cause memory corruption and potentially execute arbitrary code with system privileges, compromising the entire computer.

Technologies: AMI APTIOV. Vendors: AMI.

Quick answers

Is CVE-2025-58771 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-58771 being exploited in the wild.
How severe is CVE-2025-58771?
Informational severity, published 13 October 2026.
Which products and versions are affected?
AMI APTIOV.
Is there a fix for CVE-2025-58771?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-58771 attacked?
It is attacked with local access, in device firmware.
Am I affected by CVE-2025-58771?
Check whether you run AMI APTIOV. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow or wraparound vulnerability exists in AMI APTIOV BIOS firmware. The vulnerability requires local access and can result in buffer overflows, memory corruption, and arbitrary code execution. A successful attack impacts confidentiality, integrity, and availability of the affected system.

Affected products

  • AMI APTIOV

Timeline

  • 2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.