Improper Access Control in AMD Products
CVE-2025-52533

8.7HIGH

Key Information:

Vendor

Amd
Status
Amd Epyc™ 7003 Series Processors
Amd Epyc™ 7002 Series Processors
Amd Epyc™ 7001 Series Processors
Amd Ryzen™ Threadripper™ Pro 3000 Wx-series Processors
Vendor
CVE Published:
12 February 2026

What is CVE-2025-52533?

This vulnerability arises from improper access control within the on-chip debug interface of AMD processors, potentially allowing a privileged attacker to enable this interface. Such access could lead to significant risks, including the compromise of data confidentiality and integrity. It is crucial for users of affected AMD processors to assess their security posture and implement necessary mitigations.

Affected Version(s)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Update to Key Distribution Server (KDS)

AMD EPYC™ 7001 Series Processors No Fix Planned

AMD EPYC™ 7002 Series Processors No Fix Planned

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.