CVE-2025-0033 describes an improper access control vulnerability in AMD SEV-SNP, allowing an admin-privileged attacker to compromise guest memory integrity during SNP initialization. Rated Medium (CVSS 6.0), this local attack with low complexity could lead to high integrity impact without affecting confidentiality or availability. While not actively exploited and lacking public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating notable attention despite its lower EPSS score.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| AMD | AMD EPYC™ 7003 Series Processors (Formerly Codenamed "Milan") | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD EPYC™ 9005 Series Processors (Formerly Codenamed "Turin") | Range not provided by sourceCNA affecteddefault affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Vulnerability in AMD SEV-SNP on AMD Milan machines
Nov 6, 2025AMD CVE-2025-0033: RMP Corruption During SNP Initialization
Oct 14, 2025Vulnerability in AMD SEV-SNP on AMD Milan machines