VULNERABILITY INTELLIGENCE
CVE-2025-66664
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-06-17
Description
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception
Weakness classification
- psirt@amd.com: CWE-125