AMD Secure Encrypted Virtualization CVE-2025-29948

Improper Handling of Overlap Between Protected Memory Ranges (CWE-1260)

2026-02-10 psirt@amd.com

Authentication Bypass

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 20:16 nvd

N/A

DescriptionCVE.org

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.

Analysis

Technical ContextAI

Affected ProductsAI

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-1260 – Improper Handling of Overlap Between Protected Memory Ranges

View all

CVE-2025-1937 HIGH POC

7.5

CVE-2018-25240 MEDIUM POC

6.9

CVE-2018-25238 MEDIUM POC

6.9

CVE-2019-25592 MEDIUM POC

6.9

CVE-2019-25572 MEDIUM POC

6.9

CVE-2019-25602 MEDIUM POC

6.8

CVE-2019-25559 MEDIUM POC

6.8

CVE-2019-25585 MEDIUM POC

6.2

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2017-10271 HIGH POC

7.5

CVE-2015-1427 CRITICAL POC

9.8

CVE-2025-3248 CRITICAL POC

9.8

CVE-2025-29948 vulnerability details – vuln.today

Back