Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-29949 EUVD-2025-207143GHSA-7j6q-4xf6-xxw5

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to …

Published Feb 10, 2026 · Updated Feb 10, 2026 · Assigned by AMD

Vendor: AMD Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 3000 Series Desktop Processors Product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 4000 Series Desktop Processors Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 5000 Series Desktop Processors Product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ Embedded 8000 Series Processors Product: AMD Ryzen™ Embedded R1000 Series Processors Product: AMD Ryzen™ Embedded R2000 Series Processors Product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") Product: AMD Ryzen™ Embedded V2000 Series Processors Product: AMD Ryzen™ Embedded V3000 Series Processors Product: AMD Ryzen™ Threadripper™ 3000 Processors Product: AMD Ryzen™ Threadripper™ PRO 3000WX Processors Product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Description

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service.

Affected products

VendorProductAffectedFixed
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics — RenoirPI-FP6_1.0.0.Ec
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics — RembrandtPI-FP7_1.0.0.BD
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics — PicassoPI-FP5_1.0.1.2c
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics — PhoenixPI-FP8-FP7_1.2.0.B
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics — MendocinoPI-FT6_1.0.0.7c
AMD AMD Ryzen™ 3000 Series Desktop Processors — ComboAM4v2PI_1.2.0.F
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Processors — ChagallWSPI-sWRX8 1.0.0.C
AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1c
AMD AMD Ryzen™ Threadripper™ 3000 Processors — CastlePeakPI-SP3r3_1.0.0.F
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors — ChagallWSPI-sWRX8 1.0.0.C
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1c
AMD AMD Ryzen™ 4000 Series Desktop Processors — ComboAM4v2PI_1.2.0.F
AMD AMD Ryzen™ 5000 Series Desktop Processors — ComboAM4v2PI_1.2.0.F
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics — ComboAM4v2PI_1.2.0.F
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics — PhoenixPI-FP8-FP7_1.2.0.B
AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics — PicassoPI-FP5_1.0.1.2c
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics — RembrandtPI-FP7_1.0.0.BD
AMD AMD Ryzen™ Embedded R1000 Series Processors — EmbeddedPI-FP5 1211
AMD AMD Ryzen™ Embedded R2000 Series Processors — EmbeddedR2KPI-FP5 1006
AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") — EmbeddedPI-FP5 1211
AMD AMD Ryzen™ Embedded 8000 Series Processors — EmbeddedPhoenixPI-FP7r2_1.0.0.2
AMD AMD Ryzen™ Embedded V2000 Series Processors — EmbeddedPI-FP6_1.0.0.D
AMD AMD Ryzen™ Embedded V3000 Series Processors — EmbeddedPI-FP7r2_1.0.0.C

Advisories 1

References