CVE-2026-0436

medium

Description

Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3053.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124644

Details

Source: Mitre, NVD

Published: 2026-11-12

Updated: 2026-11-13

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L

Severity: Medium

EPSS

EPSS: 0.00126