---
id: "CVE-2026-0436"
page: "https://infrastack.ai/live/CVE-2026-0436"
kind: "vulnerability"
aliases: ["CVE-2026-0436"]
title: "AMD Secure Processor TEE SPDM driver: unsanitized input risks integrity and memory leaks"
severity: "medium"
cvss: 6.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amd", "infrastructure", "secure-processor", "spdm", "tee"]
not_affected_if: []
published_at: "2026-11-12T19:16:45+00:00"
first_seen_at: "2026-11-12T19:40:13+00:00"
updated_at: "2026-11-12T19:40:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0436", "first_seen_at": "2026-11-12T19:40:13+00:00"}]
exploit_sources: []
---

# AMD Secure Processor TEE SPDM driver: unsanitized input risks integrity and memory leaks

Link for people: https://infrastack.ai/live/CVE-2026-0436 (this .md is for agents)

AMD's Secure Processor trusted execution environment has an SPDM driver that does not sanitize parameters properly. An attacker who supplies malicious input could compromise platform integrity, leak memory, or cause a denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-12T19:40:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-0436

## From the sources

Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_