CVE-2025-0011

Published: Sep 6, 2025Modified: Jun 17, 2026Deferred

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: psirt@amd.com (Secondary)

Description

Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.

Related CWEs

CWE-212

Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html

Source: psirt@amd.com

Timeline

No history available yet.