AMD EPYC SEV firmware: Out-of-bounds write allows integrity loss
Summary
An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware on EPYC processors can be triggered by a malicious hypervisor. An attacker with this control could corrupt global firmware variables, which may lead to a loss of integrity. The attack requires local access with high privileges and does not impact confidentiality or availability according to the CVSS vector.
Affected
- AMD EPYC 9005 Series Processors (firmware TurinPI_1.0.0.B listed as unaffected in the CNA record, default affected)
- AMD EPYC 8005 Series Processors (firmware TurinPI_1.0.0.B listed as unaffected in the CNA record, default affected)
- AMD EPYC Embedded 9005 Series Processors (firmware EmbeddedTurinPI_SP5_1005 listed as unaffected in the CNA record, default affected)
- Exact affected firmware versions: Unknown.
Fixed in
Unknown. Check AMD-SB-3038 and your server vendor's advisory for the fixed firmware/BIOS builds.
Workaround
- No vendor-specific workaround documented.
- Until patched, restrict who can administer hypervisors and firmware on EPYC hosts (general hardening, not an AMD-documented workaround).
Exploitation
- Not listed in CISA KEV at the time of research.
- No public proof-of-concept found.
- No exploitation evidence reported.
Our recommendation
- Inventory EPYC 8005/9005 and Embedded 9005 virtualization hosts.
- Apply the BIOS/firmware update from your server vendor once the matching build is available, batched with other AMD-SB-3038 and AMD-SB-3037 updates.
- Protect hypervisor and firmware administration accounts.
- Re-check NVD and CISA KEV after publication, as the NVD status is still Received.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- AMD Security Bulletin AMD-SB-3038 www.amd.com
- AMD Product Security www.amd.com
- Strix AI CVE-2026-0454 www.strix.ai
- OpenCVE CVE-2026-0454 app.opencve.io
- ThreatInt CVE-2026-0454 mirror cve.threatint.com
- Supermicro Security Center www.supermicro.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 21:03.
Original description (NVD)
An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.