CVE-2025-22830

SmiFlash Race Condition Vulnerability

State
Published
Severity
7.3 High
Published
Aug 12, 2025
Updated
Aug 12, 2025
Reserved
Jan 8, 2025

Read the record on cve.org

Description

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability.

Scores

CVSSScoreVectorSource
4.07.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HAMI

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
AptioVAMI
  • AptioV_5.0 through AptioV_5.040Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.