---
id: "CVE-2025-52537"
page: "https://infrastack.ai/live/CVE-2025-52537"
kind: "vulnerability"
aliases: ["CVE-2025-52537"]
title: "AMD SEV firmware: admin access lets attacker tamper with guest memory"
severity: "medium"
cvss: 4.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amd", "confidential-computing", "infrastructure", "sev", "virtualization"]
not_affected_if: ["no-sev-guests"]
published_at: "2026-11-10T22:17:46+00:00"
first_seen_at: "2026-11-10T22:27:22+00:00"
updated_at: "2026-11-10T22:31:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52537", "first_seen_at": "2026-11-10T22:27:22+00:00"}]
exploit_sources: []
---

# AMD SEV firmware: admin access lets attacker tamper with guest memory

Link for people: https://infrastack.ai/live/CVE-2025-52537 (this .md is for agents)

AMD Secure Encrypted Virtualization firmware has an access control flaw. An attacker with administrative privileges can tamper with memory, which breaks the integrity of guest virtual machines.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T22:27:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-52537

## From the sources

Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_