CVE-2025-54502 | THREATINT

Description

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

PUBLISHED Reserved 2025-07-23 | Published 2026-04-16 | Updated 2026-04-17 | Assigner AMD

HIGH: 7.1CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-668 Exposure of Resource to Wrong Sphere

Product status

Default status

affected

GenoaPI_1.0.0.H

unaffected

Default status

affected

MilanPI-SP3_1.0.0.J

unaffected

Default status

affected

Rome-1.0.0.P

unaffected

Default status

affected

ComboAM5PI 1.0.0.d

unaffected

Default status

affected

TurinPI-SP5_1.0.0.9

unaffected

Default status

affected

MI300A 1.0.0.C

unaffected

Default status

affected

MI300C 1.0.0.3

unaffected

Default status

affected

GenoaPI_1.0.0.H

unaffected

Default status

affected

RenoirPI-FP6 1.0.0.Ed

unaffected

Default status

affected

RembrandtPI-FP7_1.0.0.Bg

unaffected

Default status

affected

PicassoPI-FP5_1.0.1.2e

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

MendocinoPI-FT6_1.0.0.7g

unaffected

Default status

affected

DragonRangeFL1PI 1.0.0.3k

unaffected

Default status

affected

ComboAM5PI 1.0.0.d

unaffected

Default status

affected

ComboAM4v2PI 1.2.0.10

unaffected

Default status

affected

ChagallWSPI-sWRX8 1.0.0.D

unaffected

Default status

affected

CezannePI-FP6_1.0.1.1d

unaffected

Default status

affected

CastlePeakWSPI-sWRX8 1.0.0.I

unaffected

Default status

affected

FireRangeFL1PI 1.0.0.0d

unaffected

Default status

affected

StrixKrackanPI-FP8_1.1.0.0e

unaffected

Default status

affected

ChagallWSPI-sWRX8 1.0.0.D

unaffected

Default status

affected

StormPeakPI-SP6 1.0.0.1m

unaffected

StormPeakPI-SP6_1.1.0.0k

unaffected

Default status

affected

ComboAM5PI 1.1.0.3f

unaffected

Default status

affected

ComboAM5PI 1.2.0.3h

unaffected

Default status

affected

ComboAM5PI 1.1.0.3f

unaffected

Default status

affected

ComboAM5PI 1.2.0.3h

unaffected

Default status

affected

ComboAM5PI 1.2.0.3h

unaffected

Default status

affected

CezannePI-FP6_1.0.1.1d

unaffected

Default status

affected

CezannePI-FP6_1.0.1.1d

unaffected

Default status

affected

ComboAM4v2PI 1.2.0.10

unaffected

Default status

affected

ComboAM4v2PI 1.2.0.10

unaffected

Default status

affected

ComboAM4v2PI 1.2.0.10

unaffected

Default status

affected

ComboAM4PI 1.0.0.10

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

PicassoPI-FP5_1.0.1.2e

unaffected

Default status

affected

RembrandtPI-FP7_1.0.0.Bg

unaffected

Default status

affected

StrixHaloPI-FP11_1.0.0.2a

unaffected

Default status

affected

StrixKrackanPI-FP8_1.1.0.0e

unaffected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

StrixKrackanPI-FP8_1.1.0.0e

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

RembrandtPI-FP7_1.0.0.Bg

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

StrixKrackanPI-FP8_1.1.0.2d

unaffected

Default status

affected

ComboAM5PI 1.2.8.0

unaffected

Default status

affected

ComboAM5PI 1.2.8.0

unaffected

Default status

affected

ComboAM5PI 1.2.8.0

unaffected

Default status

affected

EmbMilanPI-SP3 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbRomePI-SP3 1.0.0.F

unaffected

Default status

affected

EmbeddedPI-FP5 1213

unaffected

Default status

affected

EmbeddedR2KPI-FP5 1008

unaffected

Default status

affected

EmbeddedPI-FP5 1213

unaffected

Default status

affected

EmbAM4PI 1.0.0.9

unaffected

Default status

affected

EmbeddedPI-FP6_1.0.0.D

unaffected

Default status

affected

Embedded-PI_FP7r2 1012

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbeddedAM5PI 1.0.0.5

unaffected

Default status

affected

EmbeddedPhoenixPI-FP7r2_1.0.0.4

unaffected

Default status

affected

EmbeddedAM5PI 1.0.0.7

unaffected

Default status

affected

EmbeddedTurinPI_SP5_1004

unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-7054.html

cve.org (CVE-2025-54502)

nvd.nist.gov (CVE-2025-54502)

Download JSON