PT-2026-33168 · Amd · Platform Configuration Blob Smm Driver

Published 2025-08-26 · Updated 2026-04-18 · CVE-2025-54502

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions AMD Platform Configuration Blob (APCB) SMM driver (affected versions not specified)

Description Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation, potentially resulting in arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-250

CWE-668

Related Identifiers

BDU:2025-10277

CVE-2025-54502

Affected Products

Platform Configuration Blob Smm Driver

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-54502 · Security Note
• https://bdu.fstec.ru/vul/2025-10277 · Security Note
• https://reddit.com/r/CVEWatch/comments/1smz2uj/top_10_trending_cves_16042026 · Reddit Post
• https://amd.com/en/resources/product-security/bulletin/amd-sb-7054.html · Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-7054.html · Note
• https://twitter.com/ptswarm/status/2044423174394122670 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1snwkmk/top_10_trending_cves_17042026 · Reddit Post
• https://twitter.com/CVEnew/status/2045102655391842348 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1sotjei/top_10_trending_cves_18042026 · Reddit Post
• https://swarm.ptsecurity.com/slowburn-looking-through-amd-platform-configuration-blobs-infrastructure · Note