CVE-2025-62862
MEDIUM EPSS 1.3%
Published Dec 16, 20256mo ago · Modified Jun 17, 20262w ago
4.6 CVSS 3.1
Published Dec 16, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago
Description
Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM Boot Error Record Table driver that could result in (1) an out-of-bounds read which leaks Secure-EL0 information to a process running in Non-Secure state or (2) an out-of-bounds write which corrupts Secure or Non-Secure memory, limited to memory mapped to UEFI-MM Secure Partition by the Secure Partition Manager.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L Attack Vector Local
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Changed
Confidentiality None
Integrity Low
Availability Low
Threat Intelligence
EPSS Exploit Probability
1.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 2
CWE-125 Out-of-bounds Read Memory Safety
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 28
| Vendor | Product | Version | Range |
|---|---|---|---|
| amperecomputing | ampereone_a192-32m_firmware | * | <5.4.5.1 |
| amperecomputing | ampereone_a192-32m | * | any |
| amperecomputing | ampereone_a192-26m_firmware | * | <5.4.5.1 |
| amperecomputing | ampereone_a192-26m | * | any |
| amperecomputing | ampereone_a160-28m_firmware | * | <5.4.5.1 |
| amperecomputing | ampereone_a160-28m | * | any |
| amperecomputing | ampereone_a144-33m_firmware | * | <5.4.5.1 |
| amperecomputing | ampereone_a144-33m | * | any |
| amperecomputing | ampereone_a144-26m_firmware | * | <5.4.5.1 |
| amperecomputing | ampereone_a144-26m | * | any |
| amperecomputing | ampereone_a96-36m_firmware | * | <5.4.5.1 |
| amperecomputing | ampereone_a96-36m | * | any |
| amperecomputing | ampereone_a96-36x_firmware | * | <4.4.5.2 |
| amperecomputing | ampereone_a96-36x | * | any |
| amperecomputing | ampereone_a128-34x_firmware | * | <4.4.5.2 |
| amperecomputing | ampereone_a128-34x | * | any |
| amperecomputing | ampereone_a144-24x_firmware | * | <4.4.5.2 |
| amperecomputing | ampereone_a144-24x | * | any |
| amperecomputing | ampereone_a144-27x_firmware | * | <4.4.5.2 |
| amperecomputing | ampereone_a144-27x | * | any |
| amperecomputing | ampereone_a160-28x_firmware | * | <4.4.5.2 |
| amperecomputing | ampereone_a160-28x | * | any |
| amperecomputing | ampereone_a192-26x_firmware | * | <4.4.5.2 |
| amperecomputing | ampereone_a192-26x | * | any |
| amperecomputing | ampereone_a192-26x_firmware | * | <3.5.9.3 |
| amperecomputing | ampereone_a192-26x | * | any |
| amperecomputing | ampereone_a192-32x_firmware | * | <3.5.9.3 |
| amperecomputing | ampereone_a192-32x | * | any |
References 2
- amperecomputing.com https://amperecomputing.com/products/product-security
- amperecomputing.com https://amperecomputing.com/products/security-bulletins/amp-sb-0007
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.