CVE-2025-0011

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-212

Affected software

Vendor	Product	Versions
AMD	AMD Ryzen™ 8000 Series Desktop Processors	—
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	—
AMD	AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics	—
AMD	AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics	—
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	—
AMD	AMD Ryzen™ 7000 Series Mobile Processors	—
AMD	AMD Ryzen™ Z1 Series Processors	—
AMD	AMD Ryzen™ Embedded 7000 Series Processors	—
AMD	AMD Ryzen™ Embedded V2000 Series Processors	—
AMD	AMD Ryzen™ Embedded 8000 Series Processors	—
AMD	AMD Radeon™ RX 5000 Series Graphics Products	—
AMD	AMD Radeon™ PRO W5000 Series Graphics Products	—
AMD	AMD Radeon™ RX 6000 Series Graphics Products	—
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	—
AMD	AMD Radeon™ RX 7000 Series Graphics Products	—
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	—
AMD	AMD Radeon™ PRO V520 Graphics Products	—
AMD	AMD Radeon™ PRO V620 Graphics Products	—
AMD	AMD Radeon™ PRO V710 Graphics Products	—

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html

Timeline

Published: Sep 6, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-00126.8Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged CVE-2025-00147.3Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potential CVE-2025-00157.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-pri CVE-2025-00275.9Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table CVE-2025-00288.3An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address CVE-2025-00291.8Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA write CVE-2025-00314.6A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a diffe CVE-2025-00327.2Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microco CVE-2025-00336.0Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potential CVE-2025-00344.7Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cau CVE-2025-00357.3Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbi CVE-2025-00363.2In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause d