CVE-2025-33043: SMM buffer Integrity

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-29 · updated 2026-06-17
Weakness: CWE-20

Description

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity.

Affected products

AMI AptioV: from 5.0 before 5.011 — fixed in 5.011

How to fix

Upgrade to a fixed version: AMI AptioV 5.011. Check the vendor advisory for mitigations.

References

https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025005.pdf
https://www.kb.cert.org/vuls/id/209095

Get alerted when CVE-2025-33043 or the next vulnerability affects your stack