CVE-2025-54511
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data.
Risk Assessment
This may result in loss of integrity or availability of data within the protected AMD Secure Processor environment.
Recommendation
Apply AMD microcode/firmware updates containing the fix for this vulnerability as recommended by the vendor.
Other vulnerabilities in AMD Secure Processor
See all- CVE-2023-31323High
Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.
- CVE-2023-20514High
The vulnerability in AMD Secure Processor (ASP) stems from improper handling of parameters, allowing a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment. This could lead to arbitrary code execution.
- CVE-2025-29951High
A buffer overflow in the AMD Secure Processor (ASP) bootloader allows an attacker to overwrite memory, potentially leading to privilege escalation and arbitrary code execution.
- CVE-2021-46747High
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN apertures leading to a potential escalation of privileges.
Original NVD description (English source)
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS