CVE-2025-52535

MediumCVSS 5.9/10Last modified Nov 13, 2026

Description

Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write to the Reverse Map Table (RMP) protected memory, potentially resulting in loss of guest memory integrity.

Metrics

CVSS 4.0 5.9/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-672

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
AMD	AMD EPYC™ 9004 Series Processors	—
AMD	AMD EPYC™ 7003 Series Processors	—
AMD	AMD EPYC™ 9005 Series Processors	—
AMD	AMD EPYC™ 8004 Series Processors	—
AMD	AMD EPYC™ Embedded 7003 Series Processors	—
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")	—
AMD	AMD EPYC™ Embedded 9005 Series Processors	—
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")	—
AMD	AMD EPYC™ Embedded 8004 Series Processors	—

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html

Timeline

Published: Nov 10, 2026
Last modified: Nov 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2025

CVE-2025-525366.7Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting i CVE-2025-525374.0Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges CVE-2025-525388.0Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting CVE-2025-525397.3A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface CVE-2025-52546.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allo CVE-2025-525408.5An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out CVE-2025-525417.3A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary cod CVE-2025-525437.5E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An a CVE-2025-525447.5E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor CVE-2025-525457.5E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and CVE-2025-525466.1E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor CVE-2025-525477.5E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this comma