Riskcovery

CVE-2025-54502

State
Published
Severity
7.1 High
Published
Apr 16, 2026
Updated
Jul 15, 2026
Reserved
Jul 23, 2025

Read the record on cve.org

Description

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NAMD
3.17.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:Hredhat-SADP

Weaknesses

  • CWE-668 Exposure of Resource to Wrong Sphere
  • CWE-648 Incorrect Use of Privileged APIs

Affected Products

ProductVersions
AMD EPYC™ 9004 Series ProcessorsAMD
  • GenoaPI_1.0.0.HNot affected
AMD EPYC™ 7003 Series ProcessorsAMD
  • MilanPI-SP3_1.0.0.JNot affected
AMD EPYC™ 7002 Series ProcessorsAMD
  • Rome-1.0.0.PNot affected
AMD EPYC™ 4004 Series ProcessorsAMD
  • ComboAM5PI 1.0.0.dNot affected
AMD EPYC™ 9005 Series ProcessorsAMD
  • TurinPI-SP5_1.0.0.9Not affected
AMD Instinct™ MI300A Series ProcessorsAMD
  • MI300A 1.0.0.CNot affected
AMD EPYC™ 9V64H ProcessorAMD
  • MI300C 1.0.0.3Not affected
AMD EPYC™ 8004 Series ProcessorsAMD
  • GenoaPI_1.0.0.HNot affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • RenoirPI-FP6 1.0.0.EdNot affected
AMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD
  • RembrandtPI-FP7_1.0.0.BgNot affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • PicassoPI-FP5_1.0.1.2eNot affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0fNot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • MendocinoPI-FT6_1.0.0.7gNot affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD
  • DragonRangeFL1PI 1.0.0.3kNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.0.0.dNot affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD
  • ChagallWSPI-sWRX8 1.0.0.DNot affected
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1dNot affected
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD
  • CastlePeakWSPI-sWRX8 1.0.0.INot affected
AMD Ryzen™ 9000HX Series ProcessorsAMD
  • FireRangeFL1PI 1.0.0.0dNot affected
AMD Ryzen™ AI 300 Series ProcessorsAMD
  • StrixKrackanPI-FP8_1.1.0.0eNot affected
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsAMD
  • ChagallWSPI-sWRX8 1.0.0.DNot affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD
  • StormPeakPI-SP6 1.0.0.1mNot affected
  • StormPeakPI-SP6_1.1.0.0kNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.1.0.3fNot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.2.0.3hNot affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.1.0.3fNot affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.2.0.3hNot affected
AMD Ryzen™ 9000 Series Desktop ProcessorsAMD
  • ComboAM5PI 1.2.0.3hNot affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1dNot affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1dNot affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD
  • ComboAM4v2PI 1.2.0.10Not affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • ComboAM4PI 1.0.0.10Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0fNot affected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • PicassoPI-FP5_1.0.1.2eNot affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD
  • RembrandtPI-FP7_1.0.0.BgNot affected
AMD Ryzen™ AI Max 300 Series ProcessorsAMD
  • StrixHaloPI-FP11_1.0.0.2aNot affected
AMD Ryzen™ Z1 Series ProcessorsAMD
  • StrixKrackanPI-FP8_1.1.0.0eNot affected
  • PhoenixPI-FP8-FP7_1.2.0.0fNot affected
AMD Ryzen™ Z2 Series Processors ExtremeAMD
  • StrixKrackanPI-FP8_1.1.0.0eNot affected
AMD Ryzen™ Z2 Series ProcessorsAMD
  • PhoenixPI-FP8-FP7_1.2.0.0fNot affected
AMD Ryzen™ Z2 Series Processors GoAMD
  • RembrandtPI-FP7_1.0.0.BgNot affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD
  • ShimadaPeakPI-SP6 1.0.0.1cNot affected
AMD Ryzen™ Threadripper™ 7000 ProcessorsAMD
  • ShimadaPeakPI-SP6 1.0.0.1cNot affected
AMD Ryzen™ Threadripper™ 9000 ProcessorsAMD
  • ShimadaPeakPI-SP6 1.0.0.1cNot affected
AMD Ryzen™ Threadripper™ PRO 9000 WX-Series ProcessorsAMD
  • ShimadaPeakPI-SP6 1.0.0.1cNot affected
AMD Ryzen™ AI 300 Series ProcessorsAMD
  • StrixKrackanPI-FP8_1.1.0.2dNot affected
AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael")AMD
  • ComboAM5PI 1.2.8.0Not affected
AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")AMD
  • ComboAM5PI 1.2.8.0Not affected
AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge")AMD
  • ComboAM5PI 1.2.8.0Not affected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD
  • EmbMilanPI-SP3 1.0.0.DNot affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")AMD
  • EmbGenoaPI-SP5 1.0.0.DNot affected
AMD EPYC™ Embedded 7002 Series ProcessorsAMD
  • EmbRomePI-SP3 1.0.0.FNot affected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD
  • EmbeddedPI-FP5 1213Not affected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD
  • EmbeddedR2KPI-FP5 1008Not affected
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")AMD
  • EmbeddedPI-FP5 1213Not affected
AMD Ryzen™ Embedded 5000 Series ProcessorsAMD
  • EmbAM4PI 1.0.0.9Not affected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD
  • EmbeddedPI-FP6_1.0.0.DNot affected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD
  • Embedded-PI_FP7r2 1012Not affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")AMD
  • EmbGenoaPI-SP5 1.0.0.DNot affected
AMD EPYC™ Embedded 8004 Series ProcessorsAMD
  • EmbGenoaPI-SP5 1.0.0.DNot affected
AMD Ryzen™ Embedded 9000 Series ProcessorsAMD
  • EmbeddedAM5PI 1.0.0.5Not affected
AMD Ryzen™ Embedded 8000 Series ProcessorsAMD
  • EmbeddedPhoenixPI-FP7r2_1.0.0.4Not affected
AMD Ryzen™ Embedded 7000 Series ProcessorsAMD
  • EmbeddedAM5PI 1.0.0.7Not affected
AMD EPYC™ Embedded 9005 Series ProcessorsAMD
  • EmbeddedTurinPI_SP5_1004Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.