Incorrect use of boot service in the AMD Platform Configuration...

7.1 CVSS

Vulnerability Description

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54502

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-7054.html

More from AMD

View All →

CVE-2025-66664

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC...

Medium 4.6

CVE-2025-66660

Insufficient parameter sanitization in TEE SOC Driver could allow an...

Low 1.8

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow...

High 7

CVE-2025-62627

An untrusted pointer dereference in the ionic cloud driver for...

High 7.2

CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could...

High 7.2

Affected Vendor

AMD

View all reports →

Affected Software

AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 7002 Series Processors, AMD EPYC™ 4004 Series Processors, AMD EPYC™ 9005 Series Processors, AMD Instinct™ MI300A Series Processors, AMD EPYC™ 9V64H Processor, AMD EPYC™ 8004 Series Processors, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 9000HX Series Processors, AMD Ryzen™ AI 300 Series Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ AI Max 300 Series Processors, AMD Ryzen™ Z1 Series Processors, AMD Ryzen™ Z2 Series Processors Extreme, AMD Ryzen™ Z2 Series Processors, AMD Ryzen™ Z2 Series Processors Go, AMD Ryzen™ Threadripper™ 7000 Processors, AMD Ryzen™ Threadripper™ 9000 Processors, AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors, AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"), AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"), AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge"), AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD EPYC™ Embedded 7002 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"), AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"), AMD EPYC™ Embedded 8004 Series Processors, AMD Ryzen™ Embedded 9000 Series Processors, AMD Ryzen™ Embedded 8000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD EPYC™ Embedded 9005 Series Processors

Vulnerable Versions:

GenoaPI_1.0.0.H, MilanPI-SP3_1.0.0.J, Rome-1.0.0.P, ComboAM5PI 1.0.0.d, TurinPI-SP5_1.0.0.9, MI300A 1.0.0.C, MI300C 1.0.0.3, RenoirPI-FP6 1.0.0.Ed, RembrandtPI-FP7_1.0.0.Bg, PicassoPI-FP5_1.0.1.2e, PhoenixPI-FP8-FP7_1.2.0.0f, MendocinoPI-FT6_1.0.0.7g, DragonRangeFL1PI 1.0.0.3k, ComboAM4v2PI 1.2.0.10, ChagallWSPI-sWRX8 1.0.0.D, CezannePI-FP6_1.0.1.1d, CastlePeakWSPI-sWRX8 1.0.0.I, FireRangeFL1PI 1.0.0.0d, StrixKrackanPI-FP8_1.1.0.0e, StormPeakPI-SP6 1.0.0.1m, StormPeakPI-SP6_1.1.0.0k, ComboAM5PI 1.1.0.3f, ComboAM5PI 1.2.0.3h, ComboAM4PI 1.0.0.10, StrixHaloPI-FP11_1.0.0.2a, ShimadaPeakPI-SP6 1.0.0.1c, StrixKrackanPI-FP8_1.1.0.2d, ComboAM5PI 1.2.8.0, EmbMilanPI-SP3 1.0.0.D, EmbGenoaPI-SP5 1.0.0.D, EmbRomePI-SP3 1.0.0.F, EmbeddedPI-FP5 1213, EmbeddedR2KPI-FP5 1008, EmbAM4PI 1.0.0.9, EmbeddedPI-FP6_1.0.0.D, Embedded-PI_FP7r2 1012, EmbeddedAM5PI 1.0.0.5, EmbeddedPhoenixPI-FP7r2_1.0.0.4, EmbeddedAM5PI 1.0.0.7, EmbeddedTurinPI_SP5_1004