{"affected":[{"defaultStatus":"affected","product":"AMD EPYC™ 9005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"TurinPI_1.0.0.8"}]},{"defaultStatus":"affected","product":"AMD Instinct™ MI300C","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"MI300C 1.0.0.3"}]},{"defaultStatus":"affected","product":"AMD EPYC™ Embedded 9005 Series Processors","source":"CNA: AMD","vendor":"AMD","versions":[{"status":"unaffected","version":"EmbeddedTurinPI_SP5_1004"}]}],"cveId":"CVE-2026-0436","cwes":["CWE-120"],"description":"Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: AMD","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","version":"4.0"}],"modifiedAt":1794509765903,"publishedAt":1794509505431,"references":[{"source":"CNA: AMD","tags":[],"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3053.html"}],"remediation":[],"revision":"7ddd147b0291a65c7a62b7eff8194cfb095223b9816751206cef86dd7b744f7e","sources":[{"modifiedAt":1794509765903,"name":"CNA: AMD","retrievedAt":1794510504677,"url":"https://www.cve.org/CVERecord?id=CVE-2026-0436"}],"ssvc":null,"status":"published","title":"CVE-2026-0436","updatedAt":1794510504677}