Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-29949

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRA

Description

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6_1.0.0.Ecunaffected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7_1.0.0.BDunaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5_1.0.1.2cunaffected

AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7_1.2.0.Bunaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6_1.0.0.7cunaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.Funaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.Cunaffected
  • CastlePeakWSPI-sWRX8 1.0.0.Hunaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1cunaffected

AMD AMD Ryzen™ Threadripper™ 3000 Processors

Default version status: affected

  • CastlePeakPI-SP3r3_1.0.0.Funaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.Cunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1cunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1cunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.Funaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.Funaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI_1.2.0.Funaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4 1.0.0.Funaffected

AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7_1.2.0.Bunaffected

AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5_1.0.1.2cunaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7_1.0.0.BDunaffected

AMD AMD Ryzen™ Embedded R1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5 1211unaffected

AMD AMD Ryzen™ Embedded R2000 Series Processors

Default version status: affected

  • EmbeddedR2KPI-FP5 1006unaffected

AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")

Default version status: affected

  • EmbeddedPI-FP5 1211unaffected

AMD AMD Ryzen™ Embedded 8000 Series Processors

Default version status: affected

  • EmbeddedPhoenixPI-FP7r2_1.0.0.2unaffected

AMD AMD Ryzen™ Embedded V2000 Series Processors

Default version status: affected

  • EmbeddedPI-FP6_1.0.0.Dunaffected

AMD AMD Ryzen™ Embedded V3000 Series Processors

Default version status: affected

  • EmbeddedPI-FP7r2_1.0.0.Cunaffected

References