An observable timing discrepancy in the Advanced System Power (ASP) service can be leveraged by a privileged attacker to brute‑force the hash message authentication code. This allows the attacker to supply an arbitrary message and potentially forge authenticated data, resulting in a loss of data integrity.

The vulnerability affects AMD processors across the Athlon 3000 series (desktop and mobile), Ryzen 3000, 4000, 5000, 6000, 7000, and 8000 series (desktop and mobile), with Radeon graphics variants, as well as Ryzen Threadripper 3000, 7000, and PRO series (desktop and mobile). All product families listed above are subject to the timing side‑channel in the ASP layer; no specific sub‑models or firmware revisions are identified in the available data.

The CVSS score of 5.6 indicates moderate severity, and the EPSS score is not available, implying no known high‑frequency exploitation. The vulnerability is not listed in CISA’s KEV catalog. A privileged attacker with control over the ASP can perform a brute‑force attack on the HMAC, but no public exploit or widespread attacks have been documented. The risk is therefore moderate, and protection depends on limiting privileged access and applying vendor fixes where available.