{"id":"CVE-2025-0040","title":"Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially res…","summary":"Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially res…","severity":"none","cwe":["CWE-284"],"published":"2026-05-15","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-0040","references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html","label":"psirt@amd.com"},{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html","label":"psirt@amd.com"}],"tags":["nvd"],"epss":0.00125,"epssPercentile":0.01953,"ingestedAt":"2026-10-14T13:30:58.500Z","slug":"CVE-2025-0040","body":"## Overview\n\nImproper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}