CVE-2025-54511 — AMD / MI-25

Description (CNA)

Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.

Affected (CNA)

Vendor / product	Versions
AMD / MI-25	unaffected 23.10
AMD / AMD Instinct™ MI250	unaffected ROCm 6.3
AMD / AMD Instinct™ MI210	unaffected ROCm 6.3
AMD / AMD Radeon™ PRO V520	unaffected Contact your AMD Customer Engineering representative
AMD / AMD Radeon™ PRO V620	unaffected Contact your AMD Customer Engineering representative

CWE

CWE-274

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.