Read the docs
TI-2025-16714 Aliases CVE-2025-22833GHSA-r8fm-c9h2-4jg9

FixupArray Pointer Validation in NTFS

Priority LOW 22CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Passive
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00165 5th percentileScored 2026-11-07
Fix Fixed AptioV (AMI): AptioV_5.040

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMIAptioVAptioV_5.0 to before AptioV_5.040AptioV_5.040Patch availableCNA
  • AptioV VendorAMI Affected AptioV_5.0 to before AptioV_5.040 Fixed in AptioV_5.040 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*5.0 to before 5.041VulnerableAMI
  • cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:* Versions 5.0 to before 5.041 Vulnerable ·AMI

Remediation

  • Fix · CNA AptioV (AMI) Fixed in AptioV_5.040

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    AMI AptioV AptioV_5.040

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2025-24037 exFat Memory Corruption IssuePriority LOW 25
    • TI-2025-16713 Buffer Overflow in NTFS when parsing the ATTRIBUTE_LISTPriority LOW 25
    • TI-2025-16712 Buffer Overflow in NTFS when parsing the VOLUME_NAMEPriority LOW 25
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-22833
  2. 2026-10-03 Alias added: GHSA-r8fm-c9h2-4jg9

References

Advisory 1

  • TI-2022-19108 The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase. CVSS 3.1HIGH 8.2
  • TI-2022-19103 Stack overflow vulnerability in SMI handler on SmmSmbiosElog. CVSS 3.1HIGH 8.8
  • TI-2022-19107 SMM memory corruption vulnerability in OverClockSmiHandler SMM driver CVSS 3.1HIGH 8.2
  • TI-2022-10117 Stack-based buffer overflow in AMI Aptio CVSS 3.1HIGH 8.2
  • TI-2024-28413 Runtime Service Access outside SMRAM CVSS 3.1HIGH 8.8
  • TI-2025-24038 Legacy Serial Redirection SMRAM Vulnerabilities CVSS 3.1HIGH 8.2
See all 29 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences