PT-2026-7464 · Amd · Amd Secure Processor (Asp) Boot Loader

Published 2026-02-10 · Updated 2026-02-11 · CVE-2025-48515

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AMD Secure Processor (ASP) Boot Loader (affected versions not specified)

Description A flaw exists in the AMD Secure Processor (ASP) Boot Loader where insufficient parameter sanitization could allow an attacker with access to SPIROM upgrade to overwrite memory. Successful exploitation of this issue may lead to arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-01878

CVE-2025-48515

Affected Products

Amd Secure Processor (Asp) Boot Loader

References · 6

• https://bdu.fstec.ru/vul/2026-01878 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-48515 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html · Note
• https://twitter.com/CVEnew/status/2021365289376489473 · Twitter Post
• https://t.me/CVEtracker/44344 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2021454901008584979 · Twitter Post