What’s Vulnerable › Vulnerabilities

CVE-2025-29952

• Severity: medium (CVSS 5.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-10 · updated 2026-06-17
• Weakness: CWE-457

Description

Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity

Affected products

• AMD EPYC™ 9005 Series Processors: all versions
• AMD EPYC™ Embedded 9005 Series Processors: all versions

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html

Get alerted when CVE-2025-29952 or the next vulnerability affects your stack