CVE-2025-0009

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss of availability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ Graphics—
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7000 Series Desktop Processors—
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7000 Series Mobile Processors—
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7000 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7040 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 8000 Series Processor with Radeon™ Graphics—
AMDAMD Ryzen™ 9000 Series Desktop Processors—
AMDAMD Ryzen™ 4000 Series Desktop Processors—
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ Embedded 7000 Series Processors—
AMDAMD Ryzen™ Embedded 8000 Series Processors—
AMDAMD Radeon™ RX 5000 Series Graphics Products—
AMDAMD Radeon™ PRO W5000 Series Graphics Products—
AMDAMD Radeon™ RX 6000 Series Graphics Products—
AMDAMD Radeon™ PRO W6000 Series Graphics Products—
AMDAMD Radeon™ RX 7000 Series Graphics Products—
AMDAMD Radeon™ PRO W7000 Series Graphics Products—
AMDAMD Radeon™ PRO V520 Graphics Products—
AMDAMD Radeon™ PRO V620 Graphics Products—
AMDAMD Radeon™ PRO V710 Graphics Products—

References

Timeline

Published
Sep 6, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-00106.1An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidenCVE-2025-00113.3Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address CVE-2025-00126.8Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged CVE-2025-00147.3Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentialCVE-2025-00157.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-priCVE-2025-00275.9Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map TableCVE-2025-00288.3An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary addressCVE-2025-00291.8Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writeCVE-2025-00314.6A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a diffeCVE-2025-00327.2Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcoCVE-2025-00336.0Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentialCVE-2025-00344.7Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cau
CVE-2025-0009: Medium severity, CVSS 5.5 | Vulnix