Improper access control in the IOMMU register interface can let a privileged attacker force the AMD Secure Processor to perform non-coherent memory accesses, potentially corrupting data integrity. The weakness is a missing authorization check that allows the attacker to bypass protection that should limit register manipulation. The associated CWE-1262 reflects a failure to enforce correct access controls. The consequences are limited to integrity loss; there is no immediate path to code execution reported.

AMD EPYC 8004 and 9004 series processors, AMD EPYC 9005 series processors, and their embedded equivalents (8004, 9004, 9005). All affected silicon and firmware that implement the IOMMU register interface are vulnerable unless patched.

The CVSS score of 4 indicates moderate severity. No EPSS score is available, so the current exploitation probability is unknown, but the lack of a KEV designation suggests no publicly known exploits. Based on the description, it is inferred that the attacker would need privileged access to modify IOMMU registers, implying a local privilege escalation scenario. Once a privileged attacker triggers non-coherent accesses, the integrity of data processed by the AMD Secure Processor may be compromised.