Out-of-Bounds Write Vulnerability in AMD Secure Encrypted Virtualization Firmware
CVE-2026-0454

4.6MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 9005 Series Processors
Amd Epyc™ 8005 Series Processors
Amd Epyc™ Embedded 9005 Series Processors
Vendor
CVE Published:
10 November 2026

What is CVE-2026-0454?

An out-of-bounds write vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to manipulate global firmware variables. This manipulation may compromise the integrity of the system, making it crucial for users and organizations to implement appropriate security measures to mitigate potential risks.

Affected Version(s)

AMD EPYC™ 8005 Series Processors TurinPI_1.0.0.B

AMD EPYC™ 9005 Series Processors TurinPI_1.0.0.B

AMD EPYC™ Embedded 9005 Series Processors EmbeddedTurinPI_SP5_1005

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.