CVE-2026-0470: Null Pointer Dereference

Published Nov 11, 2026

Updated

Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.

Event History

Nov 11, 2026

CVE Published

via MITRE·01:27 PM

Data Sourced

via MITRE·01:27 PM

DescriptionWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using the AMD Embedded SPI Flash driver are exposed, but exploitation requires local access and low-level privileges. Remote-only attackers are not indicated by the available data.

What could an attacker achieve?

A local low-privileged user could potentially trigger a null pointer dereference and cause a loss of availability. The provided impact data does not indicate confidentiality or integrity impact.

Is user interaction required for exploitation?

No. The vector specifies no user interaction requirement, although the attacker must have local access and low privileges.

CVE-2026-0470: Null Pointer Dereference

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What could an attacker achieve?

Is user interaction required for exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What could an attacker achieve?

Is user interaction required for exploitation?