{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-0032","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","state":"PUBLISHED","assignerShortName":"AMD","dateReserved":"2024-11-21T16:17:57.821Z","datePublished":"2025-09-06T18:34:33.606Z","dateUpdated":"2026-02-26T17:49:08.978Z"},"containers":{"cna":{"providerMetadata":{"orgId":"b58fc414-a1e4-4f92-9d70-1add41838648","shortName":"AMD","dateUpdated":"2025-09-06T18:34:33.606Z"},"affected":[{"defaultStatus":"affected","vendor":"AMD","product":"AMD EPYC™ 9005 Series Processors","versions":[{"version":"TurinPI 1.0.0.4","status":"unaffected"}]},{"defaultStatus":"affected","vendor":"AMD","product":"AMD Ryzen™ AI 300 Series Processors","versions":[{"version":"StrixKrackanPI-FP8_1.1.0.1b","status":"unaffected"}]},{"defaultStatus":"affected","vendor":"AMD","product":"AMD Ryzen™ 9000 Series Desktop Processors","versions":[{"version":"ComboAM5PI 1.2.0.3c","status":"unaffected"}]},{"defaultStatus":"affected","vendor":"AMD","product":"AMD Ryzen™ 9000HX Series Processors","versions":[{"version":"FireRangeFL1PI 1.0.0.0a","status":"unaffected"}]},{"defaultStatus":"affected","vendor":"AMD","product":"AMD Ryzen™ Al Max+","versions":[{"version":"StrixHaloPI-FP11_1.0.0.1","status":"unaffected"}]},{"defaultStatus":"affected","vendor":"AMD","product":"AMD Ryzen™ Threadripper™ 9000 series","versions":[{"version":"ShimadaPeakPI-SP6 1.0.0.1","status":"unaffected"}]},{"defaultStatus":"affected","vendor":"AMD","product":"AMD EPYC™ Embedded 9000 Series Processors","versions":[{"version":"Embturin PI 1.0.0.0","status":"unaffected"}]}],"datePublic":"2025-09-06T18:13:50.803Z","descriptions":[{"lang":"en","value":"Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.","supportingMedia":[{"base64":false,"type":"text/html","value":"Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.<br>"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-459","description":"CWE-459  Incomplete Cleanup","lang":"en","type":"CWE"}]}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html"},{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html"},{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"AMD PSIRT Automation 1.0"},"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.2,"baseSeverity":"HIGH"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-0032","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-09-09T03:55:26.328525Z"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-26T17:49:08.978Z"}}]}}