Improper Bound Check Vulnerability in AMD CPU Microcode
CVE-2025-52534

5.3MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 9005 Series Processors
Vendor
CVE Published:
10 February 2026

What is CVE-2025-52534?

An improper bound check vulnerability in the AMD CPU microcode allows a malicious guest to write to unauthorized areas of host memory. This flaw can lead to significant integrity risks, potentially affecting data confidentiality and the stability of the host environment. Attackers can exploit this condition to execute arbitrary code or access sensitive information, posing severe risks to system security.

Affected Version(s)

AMD EPYC™ 9005 Series Processors TurinPI 1.0.0.6

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.