EUVD-2025-209878
GHSA-w6gm-fvfm-9m36
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.
AnalysisAI
Improper privilege validation in AMD Secure Processor (ASP) allows authenticated local attackers to write data to restricted memory regions, compromising data integrity and potentially affecting system availability. The vulnerability affects AMD MI-25, MI250, MI210 accelerators and AMD Radeon Pro V520/V620 GPUs. No public exploit code has been identified, but the low attack complexity and authenticated network access vector indicate moderate real-world risk in data center and AI/ML environments where these devices are deployed.
Technical ContextAI
The AMD Secure Processor is a dedicated security coprocessor embedded in AMD EPYC processors, MI-series AI accelerators, and Radeon Pro GPUs that enforces security policies, manages encryption keys, and controls privileged operations. The vulnerability stems from CWE-274 (Improper Handling of Insufficient Privileges), a class of authorization flaws where the system fails to properly validate that an entity possesses required privilege levels before granting access to protected functions or memory regions. This specific instance involves a function that accepts input values without adequately checking the caller's privilege level, allowing an authenticated user with lower privileges to write data that should be restricted to higher-privilege contexts, such as secure firmware regions, attestation data, or encrypted memory pools.
RemediationAI
Contact AMD for firmware updates to the affected Secure Processor implementations; patches are referenced in AMD Security Bulletin AMD-SB-6027 at https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html. Organizations should prioritize updating systems in multi-tenant environments or those with untrusted user access. Until updates are available, restrict local user privileges on systems running affected MI-25, MI250, MI210, and Radeon Pro V520/V620 devices, enforce network-level access controls to limit remote connections to systems hosting these GPUs, and audit access logs for unauthorized ASP function calls if logging is available. Disable guest or unprivileged user access to GPU compute services if business operations permit. Note trade-offs: restricting user privileges may impact shared HPC or cloud workload scheduling; network isolation may reduce performance if applications require inter-node GPU communication.
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. Rated criti
plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. Rated high severity (CVSS 8.8), this vu
AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of se
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. Rated high
AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. Rated high severity (CVSS 7.8),
AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack. Rated high severity (CVSS 7.8),
A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5.sys. Rate
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today