5.4
Medium
CVE-2025-48515 Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to…
Description
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 4000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ Embedded V2000 Series Processors | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
The 54 CVEs of AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2023-20572
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against…
5.6
Medium
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
High