Buffer Overflow in AMD Secure Processor Bootloader
CVE-2025-29951

7.3HIGH

Key Information:

Vendor

Amd
Status
Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ Embedded R1000 Series Processors
Amd Ryzen™ Embedded R2000 Series Processors
Amd Ryzen™ Embedded V1000 Series Processors (formerly Codenamed "raven Ridge")
Vendor
CVE Published:
10 February 2026

What is CVE-2025-29951?

A buffer overflow vulnerability has been identified in the AMD Secure Processor (ASP) bootloader, which may allow attackers to manipulate memory allocations. This exploitation could lead to unauthorized privilege escalation and enable the execution of arbitrary code, potentially compromising system integrity.

Affected Version(s)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5_1.0.1.2d

AMD Ryzen™ Embedded R1000 Series Processors EmbeddedPI-FP5 1212

AMD Ryzen™ Embedded R2000 Series Processors EmbeddedR2KPI-FP5 1007

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.