CVE-2025-0008

HighCVSS 8.4/10Last modified Nov 13, 2026

Description

Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.

Metrics

CVSS 4.0 8.4/10CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-347

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
AMDAMD EPYC™ 7003 Series Processors—
AMDAMD EPYC™ 7002 Series Processors—
AMDAMD EPYC™ 7001 Series Processors—
AMDAMD Ryzen™ 3000 Series Desktop Processors—
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors—
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors—
AMDAMD Ryzen™ 3000 Series Desktop Processors—
AMDAMD EPYC™ Embedded 7003 Series Processors—
AMDAMD EPYC™ Embedded 7002 Series Processors—
AMDAMD EPYC™ Embedded 3000 Series Processors—

References

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2025

CVE-2025-00095.5A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a sysCVE-2025-00106.1An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidenCVE-2025-00113.3Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address CVE-2025-00126.8Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged CVE-2025-00147.3Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentialCVE-2025-00157.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-priCVE-2025-00275.9Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map TableCVE-2025-00288.3An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary addressCVE-2025-00291.8Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writeCVE-2025-00314.6A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a diffeCVE-2025-00327.2Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcoCVE-2025-00336.0Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potential
CVE-2025-0008: High severity, CVSS 8.4 | Vulnix