Insufficient Data Authenticity Verification in AMD Products
CVE-2025-0008

8.4HIGH

Key Information:

Vendor

Amd
Status
Amd Epyc™ 7003 Series Processors
Amd Epyc™ 7002 Series Processors
Amd Epyc™ 7001 Series Processors
Amd Ryzen™ 3000 Series Desktop Processors
Vendor
CVE Published:
10 November 2026

What is CVE-2025-0008?

A vulnerability has been identified in AMD's Secure Debug Technology, where insufficient verification of data authenticity may allow local attackers to bypass key protections. This flaw could potentially lead to unauthorized access to sensitive debugging interfaces, compromising the integrity and security of the affected systems. Users are advised to implement available security patches and closely monitor their environments for any signs of exploitation.

Affected Version(s)

AMD EPYC™ 7001 Series Processors NaplesPI-SP3_1.0.0.T

AMD EPYC™ 7002 Series Processors RomePI-SP3_1.0.0.Q

AMD EPYC™ 7003 Series Processors MilanPI 1.0.0.G

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.