AMD AMD EPYC™ Embedded 9000 Series Processors

• CVE-2025-48521 Medium 6.9 Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity o 0.1%
• CVE-2025-0032 High 7.2 Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instru 0.2%