CVE-2025-54505

LowCVSS 2.0

Published: 27/04/2026(UTC)Updated: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.

Risk Assessment

An attacker with local access may read sensitive data processed by other processes, potentially compromising information security.

Recommendation

Apply AMD microcode or firmware updates and restrict local access to trusted users.

Other vulnerabilities in AMD CPUs

CVE-2025-62626High
Improper handling of insufficient entropy in AMD CPUs could allow a local attacker to influence values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

Original NVD description (English source)

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS