CVE-2025-29949 | THREATINT

Description

Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service.

PUBLISHED Reserved 2025-03-12 | Published 2026-02-10 | Updated 2026-02-10 | Assigner AMD

MEDIUM: 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-787 Out-of-bounds Write

Product status

Default status

affected

RenoirPI-FP6_1.0.0.Ec

unaffected

Default status

affected

RembrandtPI-FP7_1.0.0.BD

unaffected

Default status

affected

PicassoPI-FP5_1.0.1.2c

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.B

unaffected

Default status

affected

MendocinoPI-FT6_1.0.0.7c

unaffected

Default status

affected

ComboAM4v2PI_1.2.0.F

unaffected

Default status

affected

ChagallWSPI-sWRX8 1.0.0.C

unaffected

CastlePeakWSPI-sWRX8 1.0.0.H

unaffected

Default status

affected

CezannePI-FP6_1.0.1.1c

unaffected

Default status

affected

CastlePeakPI-SP3r3_1.0.0.F

unaffected

Default status

affected

ChagallWSPI-sWRX8 1.0.0.C

unaffected

Default status

affected

CezannePI-FP6_1.0.1.1c

unaffected

Default status

affected

CezannePI-FP6_1.0.1.1c

unaffected

Default status

affected

ComboAM4v2PI_1.2.0.F

unaffected

Default status

affected

ComboAM4v2PI_1.2.0.F

unaffected

Default status

affected

ComboAM4v2PI_1.2.0.F

unaffected

Default status

affected

ComboAM4 1.0.0.F

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.B

unaffected

Default status

affected

PicassoPI-FP5_1.0.1.2c

unaffected

Default status

affected

RembrandtPI-FP7_1.0.0.BD

unaffected

Default status

affected

EmbeddedPI-FP5 1211

unaffected

Default status

affected

EmbeddedR2KPI-FP5 1006

unaffected

Default status

affected

EmbeddedPI-FP5 1211

unaffected

Default status

affected

EmbeddedPhoenixPI-FP7r2_1.0.0.2

unaffected

Default status

affected

EmbeddedPI-FP6_1.0.0.D

unaffected

Default status

affected

EmbeddedPI-FP7r2_1.0.0.C

unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-4013.html

cve.org (CVE-2025-29949)

nvd.nist.gov (CVE-2025-29949)

Download JSON