CVE-2025-54509

MediumCVSS 4.0

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.

Risk Assessment

A privileged attacker can compromise the integrity of data processed by the AMD Secure Processor, potentially leading to unauthorized modifications or data corruption.

Recommendation

Apply BIOS/microcode updates provided by AMD that address this vulnerability. Restricting system access to trusted users can reduce risk.

Other vulnerabilities in AMD IOMMU

CVE-2023-20585Low
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS