CVE-2025-29949CWE-787

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds…

Medium · published February 10, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-10T19:46Z
EPSS history
Timeline
  • 10 FEB 19:46Z
    Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds…
    cvelistv5