CVE-2025-29951

State: Published
Severity: 7.3 High
Published: Feb 10, 2026
Updated: Feb 26, 2026
Reserved: Mar 12, 2025

Description

A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution.

Scores

CVSS	Score	Vector	Source
4.0	7.3 High	CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	AMD

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	PicassoPI-FP5_1.0.1.2dNot affected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD	EmbeddedPI-FP5 1212Not affected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD	EmbeddedR2KPI-FP5 1007Not affected
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")AMD	EmbeddedPI-FP5 1212Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.