CVE-2025-22830CWE-362
SmiFlash Race Condition Vulnerability
High · published August 12, 2025
What it is
APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability.
The record
Technical detail
- CVSS v4.0
- 7.3 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS
- 0.00094 · 0.6th percentile
- Weakness
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- Published
- 2025-08-12T14:02Z
EPSS history
Timeline