{"id":"CVE-2026-0436","aliases":["EUVD-2026-124644","GHSA-pqjr-rjcf-j764"],"status":"published","title":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution...","description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-13","score":0.00126,"percentile":0.02312,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2026-11-12T18:51:45Z","modified":"2026-11-12T21:31:32Z","products":[{"vendor":"amd","product":"amd epyc™ 9005 series processors"},{"vendor":"amd","product":"amd epyc™ embedded 9005 series processors"},{"vendor":"amd","product":"amd instinct™ mi300c"}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3053.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0436"},{"url":"https://github.com/advisories/GHSA-pqjr-rjcf-j764"}],"sources":{"cve":[{"id":"CVE-2026-0436","description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","status":"published","published":"2026-11-12T18:51:45.431Z","modified":"2026-11-13T00:18:27.884Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-12T19:47:21.570224Z"}],"euvd":[{"id":"EUVD-2026-124644","description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","status":"published","published":"2026-11-12T18:51:45Z","modified":"2026-11-13T00:18:27Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","level":"medium"}],"updated_at":"2026-11-12T23:36:14.500793Z"}],"ghsa":[{"id":"GHSA-pqjr-rjcf-j764","title":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution...","description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","status":"published","published":"2026-11-12T21:31:26Z","modified":"2026-11-12T21:31:32Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-12T21:43:38.108368Z"}],"nvd":[{"id":"CVE-2026-0436","description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","status":"published","published":"2026-11-12T19:16:45.467Z","modified":"2026-11-13T02:18:48.907Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-12T21:32:44.811521Z"}]}}