Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-0040

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the con

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7_1.2.0.Bunaffected

AMD AMD Ryzen™ 8000 Series Desktop Processors

Default version status: affected

  • ComboAM5PI 1.2.0.3dunaffected
  • ComboAM5PI 1.1.0.3dunaffected

AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7_1.2.0.Bunaffected

AMD AMD Ryzen™ Embedded 8000 Series Processors

Default version status: affected

  • EmbeddedPhoenixPI-FP7r2_1.0.0.2unaffected

References