---
id: CVE-2025-0040
title: >-
  Improper access control between the Joint Test Action Group (JTAG) and
  Advanced Extensible Interface (AXI) could allow an attacker with physical
  access to read or overwrite the contents of cross-chip debug (XCD) registers
  potentially res…
summary: >-
  Improper access control between the Joint Test Action Group (JTAG) and
  Advanced Extensible Interface (AXI) could allow an attacker with physical
  access to read or overwrite the contents of cross-chip debug (XCD) registers
  potentially res…
severity: none
cwe:
  - CWE-284
published: '2026-05-15'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-0040'
references:
  - url: >-
      https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
    label: psirt@amd.com
  - url: >-
      https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html
    label: psirt@amd.com
tags:
  - nvd
epss: 0.00125
epssPercentile: 0.01953
ingestedAt: '2026-10-14T13:30:58.500Z'
---

## Overview

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.