CVE-2025-0040

Severity: medium (CVSS 5.3 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-15 · updated 2026-10-14
Weakness: CWE-284

Description

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.

Affected products

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 8000 Series Desktop Processors: all versions
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ Embedded 8000 Series Processors: all versions

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

Get alerted when CVE-2025-0040 or the next vulnerability affects your stack