CVE-2025-58773

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2026-0893

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...

CVE-2026-0893

The AMI APTIOV BIOS contains a vulnerability where an attacker with local access can cause Exposure of Sensitive Information to an Unauthorized Actor . Successful exploitation may lead to information disclosure , privilege escalation , and further impacts on the Confidentiality, Integrity, and Av...

CVE-2025-58774

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger a “Buffer Access with Incorrect Length Value” (CWE-805). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and ...

CVE-2025-58774 UEFI OOB Write and Buffer Overflow Vulnerabilities

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

CVE-2025-58773

The AMI APTIOV BIOS contains an Out-of-bounds Write vulnerability (CWE-787) reachable via local access. Successful exploitation can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the Confidentiality, Integrity, and Availability of the system....

CVE-2025-58772

The AMI APTIOV BIOS contains vulnerabilities that allow local users to trigger a "Classic Buffer Overflow" (CWE-120). Successful exploitation of this flaw can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's Confidentiality, Integr...

CVE-2025-58771

The AMI APTIOV BIOS contains vulnerabilities where local access can trigger an Integer Overflow or Wraparound (CWE-190). Successful exploitation may lead to buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's confidentiality, integrity, and ava...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2025-58771: Integer Overflow or Wraparound

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and...

PT-2026-111579

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description An issue exists in the BIOS that allows local users to trigger an Out-of-bounds Write, which occurs when data is written outside the intended memory boundary. This can lead to buffer...

PT-2026-111578

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description Local access allows users to trigger a classic buffer overflow in the BIOS. This issue can lead to memory corruption and the execution of arbitrary code, impacting the confidentiality,...

PT-2026-111388

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2025-58772: Buffer Copy without Checking Size of Input

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2025-58773: Out-of-bounds Write

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...

CVE-2025-58774: Buffer Access with Incorrect Length Value

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

PT-2026-111580

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description Local access allows users to trigger a Buffer Access with Incorrect Length Value in the BIOS. This issue can lead to buffer overflows, memory corruption, and arbitrary code execution,...

CVE-2026-0893: Exposure of Sensitive Information Due to Incompatible Policies

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...

uefi-firmware-parser

Analizador de Firmware UEFI .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser El analizador de firmware UEFI es un módulo simple y un conjunto de scripts para analizar, extraer y recrear volúmenes de...

chipsec

CHIPSEC: Marco de Evaluación de Seguridad de la Plataforma CHIPSEC es un marco de trabajo para analizar la seguridad de plataformas de PC, incluyendo hardware, firmware del sistema BIOS/UEFI y componentes de la plataforma. Incluye un conjunto de pruebas de seguridad, herramientas para acceder a...