{"id":"CVE-2025-52537","kind":"vulnerability","aliases":["CVE-2025-52537"],"related":[],"title":"AMD SEV firmware: admin access lets attacker tamper with guest memory","description":"Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity.","summary":"AMD Secure Encrypted Virtualization firmware has an access control flaw. An attacker with administrative privileges can tamper with memory, which breaks the integrity of guest virtual machines.","severity":"medium","cvss":4.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","infrastructure","sev","virtualization"],"not_affected_if":["no-sev-guests"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","triaged_at":"2026-11-10T22:31:06+00:00","updated_at":"2026-11-10T22:31:06+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T22:31:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: admin access lets attacker tamper with guest memory","impact":"medium","summary":"AMD Secure Encrypted Virtualization firmware has an access control flaw. An attacker with administrative privileges can tamper with memory, which breaks the integrity of guest virtual machines.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","virtualization","confidential-computing"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker with admin rights tampers with guest VM memory","analyst_note":"Find AMD's security bulletin for this CVE to get affected firmware versions, fixed versions and check steps; NVD text alone gives none.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-sev-guests"],"who_is_affected":"Hosts running AMD EPYC processors with SEV-enabled virtual machines are the systems that matter. The sources do not name affected firmware versions or say how to confirm exposure. Teams not using AMD SEV confidential virtual machines can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.00068,"input_tokens":4527,"output_tokens":455,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':13A,16A '-52537':14A,17A 'access':5A,32B,53C 'admin':4A 'administr':38B,68C 'allow':64C 'amd':1A,18B,25B,57C 'attack':7A,36B,66C 'break':45B 'comput':21B 'confidenti':20B 'confidential-comput':19B 'control':33B,54C 'could':63C 'cve':12A,15A 'encrypt':27B,59C 'firmwar':3A,29B,62C 'flaw':34B 'guest':10A,49B,79C 'improp':52C 'infrastructur':22B 'integr':47B,81C 'let':6A 'loss':77C 'machin':51B 'memori':11A,43B,73C,80C 'potenti':74C 'privileg':39B,69C 'result':75C 'secur':26B,58C 'sev':2A,23B,61C 'tamper':8A,41B,71C 'virtual':24B,28B,50B,60C 'within':55C","nicknames":[],"mitigations":[],"who_affected":"Hosts running AMD EPYC processors with SEV-enabled virtual machines are the systems that matter. The sources do not name affected firmware versions or say how to confirm exposure. Teams not using AMD SEV confidential virtual machines can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","infrastructure","medium","sev","virtualization"],"campaign_type":null,"search_a":"'-2025':13A,16A '-52537':14A,17A 'access':5A 'admin':4A 'amd':1A 'attack':7A 'cve':12A,15A 'firmwar':3A 'guest':10A 'let':6A 'memori':11A 'sev':2A 'tamper':8A","search_b":"'access':32B 'administr':38B 'amd':18B,25B 'attack':36B 'break':45B 'comput':21B 'confidenti':20B 'confidential-comput':19B 'control':33B 'encrypt':27B 'firmwar':29B 'flaw':34B 'guest':49B 'infrastructur':22B 'integr':47B 'machin':51B 'memori':43B 'privileg':39B 'secur':26B 'sev':23B 'tamper':41B 'virtual':24B,28B,50B","search_c":"'access':53C 'administr':68C 'allow':64C 'amd':57C 'attack':66C 'control':54C 'could':63C 'encrypt':59C 'firmwar':62C 'guest':79C 'improp':52C 'integr':81C 'loss':77C 'memori':73C,80C 'potenti':74C 'privileg':69C 'result':75C 'secur':58C 'sev':61C 'tamper':71C 'virtual':60C 'within':55C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-52537","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52537","severity":null,"published_at":"2026-11-10T22:17:46+00:00","modified_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","fetched_at":"2026-11-10T22:27:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}