CVE-2025-29952

Use of Uninitialized Variable (CWE-457)

2026-02-10 psirt@amd.com

Information Disclosure

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 20:16 nvd

N/A

DescriptionCVE.org

Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity

Analysis

Technical ContextAI

Affected ProductsAI

Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-457 – Use of Uninitialized Variable

View all

CVE-2021-40418 CRITICAL POC

9.8

CVE-2021-3928 HIGH POC

7.8

CVE-2024-21502 HIGH POC

7.5

CVE-2026-22188 MEDIUM POC

6.9

CVE-2024-47540 CRITICAL

9.8

CVE-2026-6748 CRITICAL

9.8

CVE-2026-14405 CRITICAL

9.6

CVE-2023-25588 MEDIUM POC

5.5

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-29952 vulnerability details – vuln.today

Back