VULNERABILITY INTELLIGENCE

CVE-2025-29949

EPSS probability0.15%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17

Description

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service.

Weakness classification

  • psirt@amd.com: CWE-787

Primary references