VULNERABILITY INTELLIGENCE

CVE-2025-54510

EPSS probability0.11%
CISA KEVNot currently listed
Published2026-04-16
Last modified2026-06-17

Description

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

Weakness classification

  • psirt@amd.com: CWE-414

Primary references