Incorrect use of LocateProtocol Service of the EFI_BOOT_Services table in SMI Handler

🗓️ 14 Apr 2026 00:00:00Reported by amd.comType

amd🔗 www.amd.com👁 11 Views

CVE-2025-54502: Incorrect LocateProtocol use in EFI boot services SMI handler enables privilege escalation.

Reporter	Title	Published	Views	Family All 16
GithubExploit	poc	16 Apr 202623:26	–	githubexploit
ATTACKERKB	CVE-2025-54502	16 Apr 202618:46	–	attackerkb
BDU FSTEC	The vulnerability of the SMM AMD Platform Configuration Blob (APCB) driver, a microprogramming software for AMD processors, allows a hacker to execute derivative code.	26 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-54502	14 Apr 202617:15	–	circl
CNNVD	AMD EPYC Processor 安全漏洞	16 Apr 202600:00	–	cnnvd
CVE	CVE-2025-54502	16 Apr 202618:46	–	cve
Cvelist	CVE-2025-54502	16 Apr 202618:46	–	cvelist
EUVD	EUVD-2025-209508	16 Apr 202621:31	–	euvd
HPE Security Bulletins	HPESBHF05034 rev.1 - Certain HPE ProLiant AMD DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7054: Incorrect use of LocateProtocol Service of the EFI_BOOT_Services table in SMI Handler, Local Arbitrary Code Execution Vulnerability	14 Apr 202600:00	–	hpe
HPE Security Bulletins	HPESBHF05041 rev.2 - Certain HPE SimpliVity Servers Using Certain AMD EPYC Processors, AMD-SB-7054: Incorrect use of LocateProtocol Service of the EFI_BOOT_Services table in SMI Handler, Local Arbitrary Code Execution Vulnerability	14 May 202600:00	–	hpe