CVE-2025-52533 describes an Improper Access Control vulnerability in an unspecified on-chip debug interface, allowing a privileged attacker to enable the interface and potentially compromise data confidentiality or integrity. With a CVSSv4 score of 8.7 (High), this vulnerability has a network attack vector, high attack complexity, and high impact on confidentiality and integrity. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| AMD | AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD EPYC™ 7001 Series Processors | No Fix PlannedCNA affecteddefault affected | |
| AMD | AMD EPYC™ 7002 Series Processors | No Fix PlannedCNA affecteddefault affected | |
| AMD | AMD EPYC™ 7003 Series Processors | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD EPYC™ Embedded 3000 Series Processors | No fix plannedCNA affecteddefault affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.