Home

Description

Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.

PUBLISHED Reserved 2025-07-23 | Published 2026-05-15 | Updated 2026-05-15 | Assigner AMD




MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-274 Improper Handling of Insufficient Privileges

Product status

Default status
affected

23.10
unaffected

Default status
affected

ROCm 6.3
unaffected

Default status
affected

ROCm 6.3
unaffected

Default status
affected

Contact your AMD Customer Engineering representative
unaffected

Default status
affected

Contact your AMD Customer Engineering representative
unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-6027.html

cve.org (CVE-2025-54511)

nvd.nist.gov (CVE-2025-54511)

Download JSON