AMD Power Management Firmware Array Index Validation Vulnerability Allowing Memory Corruption
Vulnerability
A vulnerability exists in the AMD Power Management Firmware due to improper validation of an array index. This issue could enable a privileged attacker to corrupt AGESA memory, potentially leading to a loss of integrity.
Impact
Exploitation of this vulnerability could allow a privileged attacker to corrupt AGESA memory, causing a loss of integrity.
Remediation
Users are advised to update to the Platform Initialization (PI) firmware version 1.0.1.2, released on August 6, 2024. Please contact your Original Equipment Manufacturer (OEM) for the specific BIOS update for your product.
Added: Sep 6, 2025, 6:42 PM
Updated: Sep 6, 2025, 6:42 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
2.8remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.