Vulnerability Intelligence Report
CVE-2025-0032
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
No Active Exploit Signals
CVSS Base Score
7.2
HIGH
Exploitability:0.9
Impact Score:5.8
EPSS Probability:0.14%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-459 ↗CWE-459 Incomplete Cleanup
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | AMD EPYC™ 9005 Series Processors | TurinPI 1.0.0.4 (unaffected) |
| AMD | AMD Ryzen™ AI 300 Series Processors | StrixKrackanPI-FP8_1.1.0.1b (unaffected) |
| AMD | AMD Ryzen™ 9000 Series Desktop Processors | ComboAM5PI 1.2.0.3c (unaffected) |
| AMD | AMD Ryzen™ 9000HX Series Processors | FireRangeFL1PI 1.0.0.0a (unaffected) |
| AMD | AMD Ryzen™ Al Max+ | StrixHaloPI-FP11_1.0.0.1 (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ 9000 series | ShimadaPeakPI-SP6 1.0.0.1 (unaffected) |
| AMD | AMD EPYC™ Embedded 9000 Series Processors | Embturin PI 1.0.0.0 (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.142%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2024-11-21T16:17:57 |
| Published | 2025-09-06T18:34:33 |
| Patch Date | 2025-09-06 |
| Last Updated | 2026-02-26T17:49:08 |
Community Chatter & Buzz