CVEvulnerability

CVE-2025-48515

5.4 MEDIUM Published 2026-02-10 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2026-02-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.4 MEDIUM — CVSS:4.0/AV:P/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-190

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References