AMD Secure Processor Buffer Overflow Vulnerability in Bootloader Allowing Privilege Escalation and Arbitrary Code Execution

A buffer overflow vulnerability has been identified in the bootloader of the AMD Secure Processor (ASP). This vulnerability could allow an attacker to overwrite memory, potentially leading to privilege escalation and arbitrary code execution. The issue affects several AMD Ryzen and Athlon processor families, as well as AMD Ryzen Embedded processors.

Impact

Exploitation of this vulnerability could result in unauthorized memory modification, allowing for privilege escalation and arbitrary code execution on the affected system.

Remediation

Users can update to the recommended Platform Initialization (PI) version for their specific processor family. For AMD Ryzen Embedded R1000 and R2000 Series Processors, the update is available in the Key Distribution Server (KDS).