CVE-2025-29948
Awaiting Analysis Awaiting Analysis - Queue
Improper Access Control in AMD SEV Firmware Risks Memory Integrity

Publication date: 2026-02-10

Last updated on: 2026-02-10

Assigner: Advanced Micro Devices Inc.

Description
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-10
Last Modified
2026-02-10
Generated
2026-06-16
AI Q&A
2026-02-10
EPSS Evaluated
2026-06-15
NVD
CVE-2025-29948
EUVD
EUVD-2025-207428
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
amd secure_encrypted_virtualization *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1260 The product allows address regions to overlap, which can result in the bypassing of intended memory protection.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves improper access control in AMD Secure Encrypted Virtualization (SEV) firmware. It allows a malicious hypervisor to bypass the RMP (Reverse Map Table) protections.

As a result, the integrity of the SEV-SNP guest memory could be compromised.

Impact Analysis

The vulnerability could allow a malicious hypervisor to bypass security protections, leading to a loss of integrity of the guest memory in SEV-SNP environments.

This means that sensitive data within the virtualized environment could be tampered with or corrupted without detection.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-29948. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart