Security Flaw in Arm Trusted Firmware Affecting AMD Processors

CVE-2025-48507

What is CVE-2025-48507?

A vulnerability exists within the Arm Trusted Firmware (TF-A) in AMD processors, where the security state of the calling processor is not adequately enforced. This oversight may permit non-secure processors to gain unauthorized access to sensitive secure memories, perform cryptographic operations, and manipulate system-on-chip (SoC) subsystems. Proper mitigation is essential to safeguard against potential exploitation and to secure critical resources from unauthorized access.

References