Description
Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
Scores
CVSS v3
7.8
EPSS
0.0009
EPSS Percentile
24.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-119
Status
published
Products (10)
amd/ryzen_embedded_5600e_firmware
< embam4pi_1.0.0.0
amd/ryzen_embedded_5800e_firmware
< embam4pi_1.0.0.0
amd/ryzen_embedded_5900e_firmware
< embam4pi_1.0.0.0
amd/ryzen_embedded_5950e_firmware
< embam4pi_1.0.0.0
amd/ryzen_embedded_r2312_firmware
< embeddedpi-fp6_1.0.0.6
amd/ryzen_embedded_r2314_firmware
< embeddedpi-fp6_1.0.0.6
amd/ryzen_embedded_v2516_firmware
< embeddedpi-fp6_1.0.0.6
amd/ryzen_embedded_v2546_firmware
< embeddedpi-fp6_1.0.0.6
amd/ryzen_embedded_v2718_firmware
< embeddedpi-fp6_1.0.0.6
amd/ryzen_embedded_v2748_firmware
< embeddedpi-fp6_1.0.0.6
Published
Feb 13, 2024
Tracked Since
Feb 18, 2026