Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-0008

Quick assessment

Affected
AMD AMD EPYC™ 7003 Series Processors
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

数据真实性验证不足可能导致本地攻击者绕过安全调试解锁（SDU），从而引发未经授权的调试访问。

CVSS 8.4 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-0008

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
AMD AMD EPYC™ 7003 Series Processors MilanPI 1.0.0.G -
AMD AMD EPYC™ 7002 Series Processors RomePI-SP3_1.0.0.Q -
AMD AMD EPYC™ 7001 Series Processors NaplesPI-SP3_1.0.0.T -
AMD AMD Ryzen™ 3000 Series Desktop Processors ComboAM4v2 1.2.0.10 -
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors ChagallWSPI-sWRX8 1.0.0.D -
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors ChagallWSPI-sWRX8 1.0.0.D -
AMD AMD Ryzen™ 3000 Series Desktop Processors ComboAM4 1.0.0.10 -
AMD AMD EPYC™ Embedded 7003 Series Processors EmbMilanPI-SP3 1.0.0.B -
AMD AMD EPYC™ Embedded 7002 Series Processors EmbeddedRomePI-SP3 1.0.0.G -
AMD AMD EPYC™ Embedded 3000 Series Processors SnowyOwl_SP4_SP4r2.1.1.0.I -

II. Public POCs for CVE-2025-0008

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-0008

请登录查看更多情报信息。

Other References for CVE-2025-0008 (2)

Same Patch Batch · AMD · 2026-11-10 · 24 CVEs total

CVE-2025-48504 6.8 MEDIUM SEV 固件资源释放后操作漏洞致机密性完整性丧失
CVE-2026-0435 6.0 MEDIUM AMD SEV固件资源释放后操作漏洞
CVE-2026-0480 6.0 MEDIUM AMD SEV 固件认证缺失漏洞致内存机密性受损
CVE-2025-29941 6.0 MEDIUM SEV固件伪随机数种子漏洞致密钥泄露
CVE-2025-54503 5.9 MEDIUM SEV 固件内存重叠处理缺陷致完整性受损
CVE-2025-52535 5.9 MEDIUM AMD SEV 固件资源重用漏洞致内存完整性丧失
CVE-2025-54504 5.9 MEDIUM AMD SEV 固件访问控制不足漏洞致完整性受损
CVE-2025-29940 5.9 MEDIUM AMD SEV 固件未验证所有权漏洞致数据完整性受损
CVE-2025-62620 5.9 MEDIUM QEMU 输入验证漏洞致内存完整性丢失
CVE-2025-62621 5.9 MEDIUM AMD SEV固件违规致RMP绕过，破坏SEV-SNP内存完整性
CVE-2025-0027 5.9 MEDIUM AMD SEV固件访问控制漏洞致RMP保护绕过
CVE-2026-40670 5.9 MEDIUM AMD SEV-SNP 异常检查不当致完整性受损
CVE-2026-0003 5.9 MEDIUM AMD SEV 固件降级漏洞：静态密钥导致内存解密
CVE-2026-28247 5.9 MEDIUM AMD SEV 固件内存镜像访问控制漏洞致完整性丢失
CVE-2026-28248 5.9 MEDIUM AMD SEV 固件行为工作流执行不当致完整性丧失
CVE-2026-0454 4.6 MEDIUM AMD SEV 固件越界写入漏洞致完整性受损
CVE-2026-40668 4.6 MEDIUM AMD SEV 固件认证绕过漏洞
CVE-2026-28249 4.6 MEDIUM AMD SEV 固件共享状态一致性漏洞致完整性受损
CVE-2024-36309 4.6 MEDIUM AMD NBIO 锁位缺失导致重映射漏洞
CVE-2026-40669 4.0 MEDIUM AMD SEV 固件越界漏洞致内存完整性受损

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: AMD EPYC™ 7003 Series Processors
Same vendor: AMD
Same weakness: CWE-347