Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-48515 EUVD-2025-207142GHSA-g2pp-frgc-vmq6

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to over…

Published Feb 10, 2026 · Updated Feb 10, 2026 · Assigned by AMD

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting in arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics — RenoirPI-FP6 1.0.0.Ed
AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1c
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1c
AMD AMD Ryzen™ 4000 Series Desktop Processors — RenoirPI-FP6_1.0.0.Ec
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics — ComboAM4v2PI_1.2.0.11
AMD AMD Ryzen™ Embedded V2000 Series Processors — EmbeddedPI-FP6_1.0.0.D

Advisories 1

References