CVE-2025-29948
Awaiting Analysis Awaiting Analysis - Queue

Improper Access Control in AMD SEV Firmware Risks Memory Integrity

Publication date: 2026-02-10

Last updated on: 2026-02-10

Assigner: Advanced Micro Devices Inc.

Description
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-10
Last Modified
2026-02-10
Generated
2026-07-06
AI Q&A
2026-02-10
EPSS Evaluated
2026-07-05
NVD
CVE-2025-29948
EUVD
EUVD-2025-207428

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd secure_encrypted_virtualization *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1260 The product allows address regions to overlap, which can result in the bypassing of intended memory protection.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper access control in AMD Secure Encrypted Virtualization (SEV) firmware. It allows a malicious hypervisor to bypass the RMP (Reverse Map Table) protections.

As a result, the integrity of the SEV-SNP guest memory could be compromised.

Impact Analysis

The vulnerability could allow a malicious hypervisor to bypass security protections, leading to a loss of integrity of the guest memory in SEV-SNP environments.

This means that sensitive data within the virtualized environment could be tampered with or corrupted without detection.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-29948. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart