Insufficient Parameter Sanitization in AMD Secure Processor SPDM Driver
CVE-2026-0436

6.9MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 9005 Series Processors
Amd Instinct™ Mi300c
Amd Epyc™ Embedded 9005 Series Processors
Vendor
CVE Published:
12 November 2026

What is CVE-2026-0436?

A security flaw in the AMD Secure Processor's SPDM driver arises from insufficient sanitization of parameters, allowing attackers to send malicious input. This could compromise platform integrity, lead to potential memory leakage, or even cause a denial of service, impacting the overall security posture of affected systems.

Affected Version(s)

AMD EPYC™ 9005 Series Processors TurinPI_1.0.0.8

AMD EPYC™ Embedded 9005 Series Processors EmbeddedTurinPI_SP5_1004

AMD Instinct™ MI300C MI300C 1.0.0.3

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.