CVE-2025-0011

Published Sep 6, 2025 CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Description
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-27166 Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Amd
Amd radeon
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro V710
Amd radeon Pro W5000
Amd radeon Pro W6000
Amd radeon Pro W7000
Amd radeon Rx 5000
Amd radeon Rx 6000
Amd radeon Rx 7000
Amd ryzen
Amd ryzen 6000
Vendors & Products Amd
Amd radeon
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro V710
Amd radeon Pro W5000
Amd radeon Pro W6000
Amd radeon Pro W7000
Amd radeon Rx 5000
Amd radeon Rx 6000
Amd radeon Rx 7000
Amd ryzen
Amd ryzen 6000
Type Values Removed Values Added
Description Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.
Weaknesses CWE-212
References
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}