7.2
High
CVE-2025-0032 Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load…
Description
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD EPYC™ 9005 Series Processors | Versions not published | |
| AMD Ryzen™ AI 300 Series Processors | Versions not published | |
| AMD Ryzen™ 9000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 9000HX Series Processors | Versions not published | |
| AMD Ryzen™ Al Max+ | Versions not published | |
| AMD Ryzen™ Threadripper™ 9000 series | Versions not published | |
| AMD EPYC™ Embedded 9000 Series Processors | Versions not published |
Other CVEs of AMD EPYC™ 9005 Series Processors
The 27 CVEs of AMD EPYC™ 9005 Series Processors →
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a…
4.0
Medium
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to…
8.5
High
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)…
7.0
High
CVE-2025-61972
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System…
8.5
High