CVE search · CVE-2025-52537
CVE-2025-52537
medium 4.0
Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity.
Details
- Status
- Received
- Published
- Last changed
- Source
- psirt@amd.com
- Weakness
- CWE-362
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | medium 4.0 | CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
psirt@amd.comSecondary |