CVE-2026-0003 | BDVDB-2026-403013 Detail
AMDAMD EPYC™ 9004 Series Processors
Description#
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.
Impact#
Per CVSS v4.0: confidentiality impact low, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-321 Use of Hard-coded Cryptographic Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.