CVE-2025-29951

7.3 highEPSS 0.2%

High (7.3). EPSS 0.2% chance of exploitation in the next 30 days.

A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

Check your stack JSON