CVE-2026-0438 | THREATINT

Description

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

PUBLISHED Reserved 2025-12-06 | Published 2026-05-15 | Updated 2026-05-19 | Assigner AMD

MEDIUM: 5.4CVSS:4.0/AV:P/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-1072 Call to Function Pointer from Untrusted Control Sphere in SMM

Product status

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

DragonRangeFL1PI 1.0.0.3k

unaffected

Default status

affected

ComboAM5PI 1.0.0.d

unaffected

Default status

affected

FireRangeFL1PI 1.0.0.0d

unaffected

Default status

affected

StrixKrackanPI-FP8_1.1.0.0e

unaffected

Default status

affected

StormPeakPI-SP6 1.0.0.1m

unaffected

StormPeakPI-SP6_1.1.0.0k

unaffected

Default status

affected

ComboAM5PI 1.1.0.3f

unaffected

Default status

affected

ComboAM5PI_1.2.0.3i

unaffected

Default status

affected

ComboAM5PI 1.1.0.3f

unaffected

Default status

affected

ComboAM5PI_1.2.0.3i

unaffected

Default status

affected

ComboAM5PI_1.2.0.3i

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

StrixHaloPI-FP11_1.0.0.2a

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

StrixKrackanPI-FP8_1.1.0.2d

unaffected

Default status

affected

PhoenixPI-FP8-FP7_1.2.0.0f

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ShimadaPeakPI-SP6 1.0.0.1c

unaffected

Default status

affected

ComboAM5PI_1.3.0.0

unaffected

Default status

affected

ComboAM5PI_1.3.0.0

unaffected

Default status

affected

ComboAM5PI_1.3.0.0

unaffected

Default status

affected

EmbeddedAM5PI 1.0.0.5

unaffected

Default status

affected

EmbeddedPhoenixPI-FP7r2_1.0.0.4

unaffected

Default status

affected

EmbeddedAM5PI 1.0.0.5

unaffected

Default status

affected

ComboAM5PI 1.0.0.d / ComboAM5PI 1.1.0.3f / ComboAM5PI_1.2.0.3i

unaffected

Default status

affected

ComboAM5PI_1.2.0.3i

unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-3030.html

www.amd.com/...es/product-security/bulletin/AMD-SB-4017.html

cve.org (CVE-2026-0438)

nvd.nist.gov (CVE-2026-0438)

Download JSON