Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-0436 EUVD-2026-124644GHSA-pqjr-rjcf-j764

Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attack…

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by AMD

Description

Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 9005 Series Processors — TurinPI_1.0.0.8
AMD AMD Instinct™ MI300C — MI300C 1.0.0.3
AMD AMD EPYC™ Embedded 9005 Series Processors — EmbeddedTurinPI_SP5_1004

References