Security Advisory

CVE-2025-66664

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-15 02:41:56
Last updated 2026-05-15 16:31:27
Assigner AMD
CVSS score 4.6
State PUBLISHED

Description

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception