{"id":"CVE-2026-0436","kind":"vulnerability","aliases":["CVE-2026-0436"],"related":[],"title":"AMD Secure Processor TEE SPDM driver: unsanitized input risks integrity and memory leaks","description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","summary":"AMD's Secure Processor trusted execution environment has an SPDM driver that does not sanitize parameters properly. An attacker who supplies malicious input could compromise platform integrity, leak memory, or cause a denial of service.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","infrastructure","secure-processor","spdm","tee"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-12T19:16:45+00:00","first_seen_at":"2026-11-12T19:40:13+00:00","triaged_at":"2026-11-12T19:40:50+00:00","updated_at":"2026-11-12T19:40:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-12T19:40:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"AMD Secure Processor TEE SPDM driver: unsanitized input risks integrity and memory leaks","impact":"medium","summary":"AMD's Secure Processor trusted execution environment has an SPDM driver that does not sanitize parameters properly. An attacker who supplies malicious input could compromise platform integrity, leak memory, or cause a denial of service.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","secure-processor","tee","spdm"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"platform integrity lost, memory leaked, or service denied","analyst_note":"Check AMD's security bulletin and the NVD entry for affected firmware and driver versions, required access, and fixed versions.","how_to_check":"unknown","plain_action":"","product_name":"AMD Secure Processor (ASP) TEE SPDM driver","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000669,"input_tokens":4550,"output_tokens":428,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-0436':16A,19A '-2026':15A,18A 'allow':78C 'amd':1A,20B,27B,67C 'asp':70C 'attack':45B,80C 'caus':57B 'compromis':51B 'could':50B,77C 'cve':14A,17A 'denial':59B,95C 'driver':6A,37B,76C 'environ':33B,73C 'execut':32B,72C 'infrastructur':21B 'input':8A,49B,84C 'insuffici':62C 'integr':10A,53B,91C 'leak':13A,54B 'leakag':93C 'loss':88C 'malici':48B,83C 'memori':12A,55B,92C 'paramet':42B,63C 'platform':52B,90C 'potenti':85C 'processor':3A,24B,30B,69C 'proper':43B 'result':86C 'risk':9A 'sanit':41B,64C 'secur':2A,23B,29B,68C 'secure-processor':22B 'servic':61B,97C 'spdm':5A,25B,36B,75C 'suppli':47B,82C 'tee':4A,26B,74C 'trust':31B,71C 'unsanit':7A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","infrastructure","medium","secureprocessor","spdm","tee"],"campaign_type":null,"search_a":"'-0436':16A,19A '-2026':15A,18A 'amd':1A 'cve':14A,17A 'driver':6A 'input':8A 'integr':10A 'leak':13A 'memori':12A 'processor':3A 'risk':9A 'secur':2A 'spdm':5A 'tee':4A 'unsanit':7A","search_b":"'amd':20B,27B 'attack':45B 'caus':57B 'compromis':51B 'could':50B 'denial':59B 'driver':37B 'environ':33B 'execut':32B 'infrastructur':21B 'input':49B 'integr':53B 'leak':54B 'malici':48B 'memori':55B 'paramet':42B 'platform':52B 'processor':24B,30B 'proper':43B 'sanit':41B 'secur':23B,29B 'secure-processor':22B 'servic':61B 'spdm':25B,36B 'suppli':47B 'tee':26B 'trust':31B","search_c":"'allow':78C 'amd':67C 'asp':70C 'attack':80C 'could':77C 'denial':95C 'driver':76C 'environ':73C 'execut':72C 'input':84C 'insuffici':62C 'integr':91C 'leakag':93C 'loss':88C 'malici':83C 'memori':92C 'paramet':63C 'platform':90C 'potenti':85C 'processor':69C 'result':86C 'sanit':64C 'secur':68C 'servic':97C 'spdm':75C 'suppli':82C 'tee':74C 'trust':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T19:16:45+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-0436","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0436","severity":null,"published_at":"2026-11-12T19:16:45+00:00","modified_at":"2026-11-12T19:24:37+00:00","first_seen_at":"2026-11-12T19:40:13+00:00","fetched_at":"2026-11-12T19:40:13+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}