AMD ASP Out-of-Bounds Read Vulnerability Allowing Privileged Memory Access

A vulnerability has been identified in the AMD Application Security Processor (ASP) that allows for an out-of-bounds read. This issue could enable a privileged attacker with access to a malicious bootloader to read sensitive memory, potentially leading to a loss of confidentiality. The vulnerability affects several AMD Client Processor platforms, including Ryzen and Athlon mobile processors, as well as AMD Embedded processors.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive memory, causing a breach of confidentiality.

Remediation

Users are advised to update to the latest Platform Initialization (PI) firmware version. Specific update instructions can be obtained from the original equipment manufacturer (OEM).