CVE-2026-0003: AMD ASP Bootloader vulnerability
Published Nov 10, 2026
·Updated
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.
Affected Software
1 affected component
AMD ASP Bootloader
Event History
Nov 10, 2026
CVE Published
via MITRE·10:12 PM
Data Sourced
via MITRE·10:12 PM
DescriptionWeakness