AMD APCB SMM Driver PrivEsc via Boot Service Exploit
CVE-2025-54502 Published on April 16, 2026

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

NVD

Weakness Type

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

Affected Versions

AMD EPYC™ 9004 Series Processors:

Version GenoaPI_1.0.0.H is unaffected.

AMD EPYC™ 7003 Series Processors:

Version MilanPI-SP3_1.0.0.J is unaffected.

AMD EPYC™ 7002 Series Processors:

Version Rome-1.0.0.P is unaffected.

AMD EPYC™ 4004 Series Processors:

Version ComboAM5PI 1.0.0.d is unaffected.

AMD EPYC™ 9005 Series Processors:

Version TurinPI-SP5_1.0.0.9 is unaffected.

AMD Instinct™ MI300A Series Processors:

Version MI300A 1.0.0.C is unaffected.

AMD EPYC™ 9V64H Processor:

Version MI300C 1.0.0.3 is unaffected.

AMD EPYC™ 8004 Series Processors:

Version GenoaPI_1.0.0.H is unaffected.

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics:

Version RenoirPI-FP6 1.0.0.Ed is unaffected.

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics:

Version RembrandtPI-FP7_1.0.0.Bg is unaffected.

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics:

Version PicassoPI-FP5_1.0.1.2e is unaffected.

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics:

Version PhoenixPI-FP8-FP7_1.2.0.0f is unaffected.

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics:

Version MendocinoPI-FT6_1.0.0.7g is unaffected.

AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics:

Version DragonRangeFL1PI 1.0.0.3k is unaffected.

AMD Ryzen™ 7000 Series Desktop Processors:

Version ComboAM5PI 1.0.0.d is unaffected.

AMD Ryzen™ 3000 Series Desktop Processors:

Version ComboAM4v2PI 1.2.0.10 is unaffected.

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors:

Version ChagallWSPI-sWRX8 1.0.0.D is unaffected.

AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics:

Version CezannePI-FP6_1.0.1.1d is unaffected.

AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors:

Version CastlePeakWSPI-sWRX8 1.0.0.I is unaffected.

AMD Ryzen™ 9000HX Series Processors:

Version FireRangeFL1PI 1.0.0.0d is unaffected.

AMD Ryzen™ AI 300 Series Processors:

Version StrixKrackanPI-FP8_1.1.0.0e is unaffected.

AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors:

Version ChagallWSPI-sWRX8 1.0.0.D is unaffected.

AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors:

Version StormPeakPI-SP6 1.0.0.1m is unaffected.
Version StormPeakPI-SP6_1.1.0.0k is unaffected.

AMD Ryzen™ 7000 Series Desktop Processors:

Version ComboAM5PI 1.1.0.3f is unaffected.

AMD Ryzen™ 7000 Series Desktop Processors:

Version ComboAM5PI 1.2.0.3h is unaffected.

AMD Ryzen™ 8000 Series Desktop Processors:

Version ComboAM5PI 1.1.0.3f is unaffected.

AMD Ryzen™ 8000 Series Desktop Processors:

Version ComboAM5PI 1.2.0.3h is unaffected.

AMD Ryzen™ 9000 Series Desktop Processors:

Version ComboAM5PI 1.2.0.3h is unaffected.

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics:

Version CezannePI-FP6_1.0.1.1d is unaffected.

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics:

Version CezannePI-FP6_1.0.1.1d is unaffected.

AMD Ryzen™ 4000 Series Desktop Processors:

Version ComboAM4v2PI 1.2.0.10 is unaffected.

AMD Ryzen™ 5000 Series Desktop Processors:

Version ComboAM4v2PI 1.2.0.10 is unaffected.

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics:

Version ComboAM4v2PI 1.2.0.10 is unaffected.

AMD Ryzen™ 3000 Series Desktop Processors:

Version ComboAM4PI 1.0.0.10 is unaffected.

AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics:

Version PhoenixPI-FP8-FP7_1.2.0.0f is unaffected.

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics:

Version PicassoPI-FP5_1.0.1.2e is unaffected.

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics:

Version RembrandtPI-FP7_1.0.0.Bg is unaffected.

AMD Ryzen™ AI Max 300 Series Processors:

Version StrixHaloPI-FP11_1.0.0.2a is unaffected.

AMD Ryzen™ Z1 Series Processors:

Version StrixKrackanPI-FP8_1.1.0.0e is unaffected.
Version PhoenixPI-FP8-FP7_1.2.0.0f is unaffected.

AMD Ryzen™ Z2 Series Processors Extreme:

Version StrixKrackanPI-FP8_1.1.0.0e is unaffected.

AMD Ryzen™ Z2 Series Processors:

Version PhoenixPI-FP8-FP7_1.2.0.0f is unaffected.

AMD Ryzen™ Z2 Series Processors Go:

Version RembrandtPI-FP7_1.0.0.Bg is unaffected.

AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors:

Version ShimadaPeakPI-SP6 1.0.0.1c is unaffected.

AMD Ryzen™ Threadripper™ 7000 Processors:

Version ShimadaPeakPI-SP6 1.0.0.1c is unaffected.

AMD Ryzen™ Threadripper™ 9000 Processors:

Version ShimadaPeakPI-SP6 1.0.0.1c is unaffected.

AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors:

Version ShimadaPeakPI-SP6 1.0.0.1c is unaffected.

AMD Ryzen™ AI 300 Series Processors:

Version StrixKrackanPI-FP8_1.1.0.2d is unaffected.

AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"):

Version ComboAM5PI 1.2.8.0 is unaffected.

AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"):

Version ComboAM5PI 1.2.8.0 is unaffected.

AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge"):

Version ComboAM5PI 1.2.8.0 is unaffected.

AMD EPYC™ Embedded 7003 Series Processors:

Version EmbMilanPI-SP3 1.0.0.D is unaffected.

AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"):

Version EmbGenoaPI-SP5 1.0.0.D is unaffected.

AMD EPYC™ Embedded 7002 Series Processors:

Version EmbRomePI-SP3 1.0.0.F is unaffected.

AMD Ryzen™ Embedded R1000 Series Processors:

Version EmbeddedPI-FP5 1213 is unaffected.

AMD Ryzen™ Embedded R2000 Series Processors:

Version EmbeddedR2KPI-FP5 1008 is unaffected.

AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"):

Version EmbeddedPI-FP5 1213 is unaffected.

AMD Ryzen™ Embedded 5000 Series Processors:

Version EmbAM4PI 1.0.0.9 is unaffected.

AMD Ryzen™ Embedded V2000 Series Processors:

Version EmbeddedPI-FP6_1.0.0.D is unaffected.

AMD Ryzen™ Embedded V3000 Series Processors:

Version Embedded-PI_FP7r2 1012 is unaffected.

AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"):

Version EmbGenoaPI-SP5 1.0.0.D is unaffected.

AMD EPYC™ Embedded 8004 Series Processors:

Version EmbGenoaPI-SP5 1.0.0.D is unaffected.

AMD Ryzen™ Embedded 9000 Series Processors:

Version EmbeddedAM5PI 1.0.0.5 is unaffected.

AMD Ryzen™ Embedded 8000 Series Processors:

Version EmbeddedPhoenixPI-FP7r2_1.0.0.4 is unaffected.

AMD Ryzen™ Embedded 7000 Series Processors:

Version EmbeddedAM5PI 1.0.0.7 is unaffected.

AMD EPYC™ Embedded 9005 Series Processors:

Version EmbeddedTurinPI_SP5_1004 is unaffected.

Exploit Probability

EPSS

0.02%

Percentile

5.63%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

AMD APCB SMM Driver PrivEsc via Boot Service ExploitCVE-2025-54502 Published on April 16, 2026

Weakness Type

Exposure of Resource to Wrong Sphere

Affected Versions

Exploit Probability

AMD APCB SMM Driver PrivEsc via Boot Service Exploit
CVE-2025-54502 Published on April 16, 2026