CVE-2025-62626

HighCVSS 7.2

Published: 21/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

Improper handling of insufficient entropy in AMD CPUs could allow a local attacker to influence values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

Risk Assessment

A local attacker could weaken the quality of random data produced by the CPU, undermining the security of cryptographic mechanisms that rely on RDSEED.

Recommendation

Apply AMD microcode/firmware updates and consider using additional entropy sources for critical cryptographic mechanisms.

Other vulnerabilities in AMD CPUs

CVE-2025-54505Low
A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.

Original NVD description (English source)

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS