{"id":"CVE-2025-52535","kind":"vulnerability","aliases":["CVE-2025-52535"],"related":[],"title":"AMD SEV firmware: improper resource reuse lets hypervisor write protected memory","description":"Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write to the Reverse Map Table (RMP) protected memory, potentially resulting in loss of guest memory integrity.","summary":"AMD Secure Encrypted Virtualization (SEV) firmware reuses a resource improperly, letting an attacker with hypervisor access write to Reverse Map Table (RMP) protected memory. The result can be loss of guest memory integrity for virtual machines.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","hypervisor","infrastructure","sev","virtualization"],"not_affected_if":["no-amd-sev"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","triaged_at":"2026-11-10T22:30:37+00:00","updated_at":"2026-11-10T22:30:37+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T22:30:37Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: improper resource reuse lets hypervisor write protected memory","impact":"medium","summary":"AMD Secure Encrypted Virtualization (SEV) firmware reuses a resource improperly, letting an attacker with hypervisor access write to Reverse Map Table (RMP) protected memory. The result can be loss of guest memory integrity for virtual machines.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","hypervisor","virtualization"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker with hypervisor access corrupts guest VM memory integrity","analyst_note":"Find AMD security bulletin for CVE-2025-52535 to get affected and fixed firmware versions and any mitigation.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-amd-sev"],"who_is_affected":"Affects hosts running AMD SEV-capable processors with SEV firmware in virtualized environments, where guest memory integrity is relied upon. The sources do not name the affected firmware versions or the patched versions, so the exact exposure is unknown. Teams not running AMD SEV-protected virtual machines can likely skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000707,"input_tokens":4547,"output_tokens":505,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':13A,16A '-52535':14A,17A 'access':38B,76C 'allow':71C 'amd':1A,18B,23B,64C 'attack':35B,73C 'could':70C 'cve':12A,15A 'encrypt':25B,66C 'firmwar':3A,28B,69C 'guest':53B,92C 'hypervisor':8A,19B,37B,75C 'improp':4A,32B,59C 'infrastructur':20B 'integr':55B,94C 'let':7A,33B 'loss':51B,90C 'machin':58B 'map':42B,82C 'memori':11A,46B,54B,86C,93C 'potenti':87C 'protect':10A,45B,85C 'resourc':5A,31B,60C 'result':48B,88C 'reus':6A,29B,61C 'revers':41B,81C 'rmp':44B,84C 'secur':24B,65C 'sev':2A,21B,27B,68C 'tabl':43B,83C 'virtual':22B,26B,57B,67C 'write':9A,39B,78C","nicknames":[],"mitigations":[],"who_affected":"Affects hosts running AMD SEV-capable processors with SEV firmware in virtualized environments, where guest memory integrity is relied upon. The sources do not name the affected firmware versions or the patched versions, so the exact exposure is unknown. Teams not running AMD SEV-protected virtual machines can likely skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","hypervisor","infrastructure","medium","sev","virtualization"],"campaign_type":null,"search_a":"'-2025':13A,16A '-52535':14A,17A 'amd':1A 'cve':12A,15A 'firmwar':3A 'hypervisor':8A 'improp':4A 'let':7A 'memori':11A 'protect':10A 'resourc':5A 'reus':6A 'sev':2A 'write':9A","search_b":"'access':38B 'amd':18B,23B 'attack':35B 'encrypt':25B 'firmwar':28B 'guest':53B 'hypervisor':19B,37B 'improp':32B 'infrastructur':20B 'integr':55B 'let':33B 'loss':51B 'machin':58B 'map':42B 'memori':46B,54B 'protect':45B 'resourc':31B 'result':48B 'reus':29B 'revers':41B 'rmp':44B 'secur':24B 'sev':21B,27B 'tabl':43B 'virtual':22B,26B,57B 'write':39B","search_c":"'access':76C 'allow':71C 'amd':64C 'attack':73C 'could':70C 'encrypt':66C 'firmwar':69C 'guest':92C 'hypervisor':75C 'improp':59C 'integr':94C 'loss':90C 'map':82C 'memori':86C,93C 'potenti':87C 'protect':85C 'resourc':60C 'result':88C 'reus':61C 'revers':81C 'rmp':84C 'secur':65C 'sev':68C 'tabl':83C 'virtual':67C 'write':78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-52535","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52535","severity":null,"published_at":"2026-11-10T22:17:46+00:00","modified_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","fetched_at":"2026-11-10T22:27:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}