Improper Bound Check in AMD CPU Microcode Enables Guest Write to Host Memory
CVE-2025-52534 Published on February 10, 2026

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity.

NVD

Weakness Type

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.


Affected Versions

AMD EPYC™ 9005 Series Processors Version TurinPI 1.0.0.6 is unaffected by CVE-2025-52534

Exploit Probability

EPSS
0.11%
Percentile
29.25%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.