CVE search · CVE-2026-0003
CVE-2026-0003
medium 5.9
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.
Details
- Status
- Received
- Published
- Last changed
- Source
- psirt@amd.com
- Weakness
- CWE-321
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | medium 5.9 | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
psirt@amd.comSecondary |