Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-48515

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting i

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6 1.0.0.Edunaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1cunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1cunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • RenoirPI-FP6_1.0.0.Ecunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI_1.2.0.11unaffected

AMD AMD Ryzen™ Embedded V2000 Series Processors

Default version status: affected

  • EmbeddedPI-FP6_1.0.0.Dunaffected

References