CVE-2025-6202

Phoenix: Rowhammer attack on Hynix DDR5 devices

High · published September 15, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H
EPSS
0.00306 · 22.3th percentile
Published
2025-09-15T15:06Z
EPSS history
Timeline
  • 15 SEP 15:06Z
    Phoenix: Rowhammer attack on Hynix DDR5 devices
    cvelistv5