CVE-2025-0032CWE-459

Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially…

High · published September 6, 2025

CVSS v3.1
7.2
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00152 · 4.0th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2025-09-06T18:34Z
EPSS history
Timeline
  • 06 SEP 18:34Z
    Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially…
    cvelistv5