{"id":"CVE-2025-0032","state":"PUBLISHED","title":"Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of int","description":"Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.","publishedAt":"2025-09-06T18:34:33.606Z","updatedAt":"2026-02-26T17:49:08.978Z","severity":{"score":7.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","source":"AMD"},"assigner":"AMD","products":["AMD AMD EPYC™ 9005 Series Processors","AMD AMD Ryzen™ AI 300 Series Processors","AMD AMD Ryzen™ 9000 Series Desktop Processors","AMD AMD Ryzen™ 9000HX Series Processors","AMD AMD Ryzen™ Al Max+","AMD AMD Ryzen™ Threadripper™ 9000 series","AMD AMD EPYC™ Embedded 9000 Series Processors"],"affected":[{"vendor":"AMD","product":"AMD EPYC™ 9005 Series Processors","defaultStatus":"affected","versions":[{"version":"TurinPI 1.0.0.4","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ AI 300 Series Processors","defaultStatus":"affected","versions":[{"version":"StrixKrackanPI-FP8_1.1.0.1b","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 9000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM5PI 1.2.0.3c","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 9000HX Series Processors","defaultStatus":"affected","versions":[{"version":"FireRangeFL1PI 1.0.0.0a","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Al Max+","defaultStatus":"affected","versions":[{"version":"StrixHaloPI-FP11_1.0.0.1","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ 9000 series","defaultStatus":"affected","versions":[{"version":"ShimadaPeakPI-SP6 1.0.0.1","status":"unaffected"}]},{"vendor":"AMD","product":"AMD EPYC™ Embedded 9000 Series Processors","defaultStatus":"affected","versions":[{"version":"Embturin PI 1.0.0.0","status":"unaffected"}]}],"references":["https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html","https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html","https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html"],"weaknesses":["CWE-459"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/0xxx/CVE-2025-0032.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-0032","state":"PUBLISHED","datePublished":"2025-09-06T18:34:33.606Z","dateUpdated":"2026-02-26T17:49:08.978Z","assignerShortName":"AMD","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateReserved":"2024-11-21T16:17:57.821Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution."}],"affected":[{"vendor":"AMD","product":"AMD EPYC™ 9005 Series Processors","defaultStatus":"affected","versions":[{"version":"TurinPI 1.0.0.4","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ AI 300 Series Processors","defaultStatus":"affected","versions":[{"version":"StrixKrackanPI-FP8_1.1.0.1b","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 9000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM5PI 1.2.0.3c","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 9000HX Series Processors","defaultStatus":"affected","versions":[{"version":"FireRangeFL1PI 1.0.0.0a","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Al Max+","defaultStatus":"affected","versions":[{"version":"StrixHaloPI-FP11_1.0.0.1","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ 9000 series","defaultStatus":"affected","versions":[{"version":"ShimadaPeakPI-SP6 1.0.0.1","status":"unaffected"}]},{"vendor":"AMD","product":"AMD EPYC™ Embedded 9000 Series Processors","defaultStatus":"affected","versions":[{"version":"Embturin PI 1.0.0.0","status":"unaffected"}]}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html"},{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html"},{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.2,"baseSeverity":"HIGH"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-459","description":"CWE-459  Incomplete Cleanup","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"AMD","orgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateUpdated":"2025-09-06T18:34:33.606Z"},"datePublic":"2025-09-06T18:13:50.803Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"AMD PSIRT Automation 1.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-0032","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-09-09T03:55:26.328525Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T17:49:08.978Z"}}]}}}