CVE-2025-62621: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory integrity.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

SEV-SNP guests are the affected security boundary. Exploitation requires a malicious hypervisor, so environments where the hypervisor operator or host stack is trusted are not exposed to that threat model in the same way.

What does an attacker need to exploit it?

The attacker needs high privileges as a hypervisor and must be able to act maliciously against an SEV-SNP guest. The issue is locally exploitable and does not require user interaction.

What security property is affected?

The potential impact is loss of SEV-SNP guest memory integrity through bypass of Reverse Map Table protections. The provided assessment does not indicate loss of guest memory confidentiality or availability.

CVE-2025-62621: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

What security property is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit it?

What security property is affected?