AMD Embedded SPI Flash driver: Null pointer dereference
Summary
A null pointer dereference in the AMD Embedded SPI Flash driver affects several AMD Embedded processor families, including EPYC Embedded 3000 and Ryzen Embedded R1000, R2000, V1000 and V2000. A local user can trigger it to cause a loss of availability. The vendor description does not mention code execution or data exposure. Exploitation requires a local account with low privileges.
Affected
- AMD EPYC Embedded 3000 Series Processors (default affected; CNA marks Embedded Snowyowl Chipset Driver 8.10.28.647 as unaffected)
- AMD Ryzen Embedded R1000, R2000, V1000 and V2000 Series Processors (CNA marks Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver 73752e as unaffected)
- Windows and Linux scope otherwise unknown
Fixed in
Unknown from the primary bulletin. The CVE record marks the builds above as unaffected, which suggests fixed driver builds. Confirm exact fixed versions and any BIOS or firmware requirements in AMD-SB-5010.
Workaround
- Unknown: no official AMD workaround identified.
- Limit local logon and shell access on affected devices to trusted administrators.
Exploitation
- No evidence of exploitation in the wild found.
- No public proof-of-concept found.
- Not listed in CISA KEV according to a third-party source; not checked directly.
Our recommendation
- Identify devices with the affected AMD Embedded processors.
- Apply the driver or BIOS update from AMD-SB-5010 or the device vendor during regular maintenance.
- Prioritise devices where untrusted local users are possible.
- Check the AMD bulletin directly before relying on the build numbers above.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- AMD-SB-5010 Bulletin www.amd.com
- CVE Record CVE-2026-0470 www.cve.org
- AMD Product Security www.amd.com
- VulDB CVE-2026-0470 vuldb.com
- OffSeq CVE-2026-0470 radar.offseq.com
- Strix CVE-2026-0470 www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 15:28.
Original description (NVD)
Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.