CVE-2022-23825
MEDIUM · CVSS 6.5EPSS 0.8%EU EUVD
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
Key facts
- CVSS score
- 6.5 (v3.1)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N- Weakness (CWE)
- CWE-668
- EPSS score
- 0.8% (55th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2022-28754)
- Published
- July 14, 2022
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2022-28754 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.
View on the EU Vulnerability DatabaseAffected products
- amd / a10-9600p
- amd / a10-9600p firmware
- amd / a10-9630p
- amd / a10-9630p firmware
- amd / a12-9700p
- amd / a12-9700p firmware
- amd / a12-9730p
- amd / a12-9730p firmware
- amd / a4-9120
- amd / a4-9120 firmware
- amd / a6-9210
- amd / a6-9210 firmware
- amd / a6-9220
- amd / a6-9220 firmware
- amd / a6-9220c
- amd / a6-9220c firmware
- amd / a9-9410
- amd / a9-9410 firmware
- amd / a9-9420
- amd / a9-9420 firmware
- amd / athlon gold 3150u
- amd / athlon gold 3150u firmware
- amd / athlon silver 3050u
- amd / athlon silver 3050u firmware
- amd / athlon x4 750
- amd / athlon x4 750 firmware
- amd / athlon x4 760k
- amd / athlon x4 760k firmware
- amd / athlon x4 830
- amd / athlon x4 830 firmware
- amd / athlon x4 835
- amd / athlon x4 835 firmware
- amd / athlon x4 840
- amd / athlon x4 840 firmware
- amd / athlon x4 845
- amd / athlon x4 845 firmware
- amd / athlon x4 860k
- amd / athlon x4 860k firmware
- amd / athlon x4 870k
- amd / athlon x4 870k firmware
- amd / athlon x4 880k
- amd / athlon x4 880k firmware
- amd / athlon x4 940
- amd / athlon x4 940 firmware
- amd / athlon x4 950
- amd / athlon x4 950 firmware
- amd / athlon x4 970
- amd / athlon x4 970 firmware
- amd / epyc 7001
- amd / epyc 7001 firmware
and 214 more…
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- VMware ESXi 7.0 Update 3d - VMware Inc. - Common Criteria CCEVS-VR-VID-11249-2022 - archived
References
- http://www.openwall.com/lists/oss-security/2022/11/08/1(Mailing List, Third Party Advisory)
- http://www.openwall.com/lists/oss-security/2022/11/10/2(Mailing List, Third Party Advisory)
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4RW5FCIYFNCQOEFJEUIRW3DGYW7CWBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLSRW4LLTAT3CZMOYVNTC7YIYGX3KLED/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M27MB3QFNIJV4EQQSXWARHP3OGX6CR6K/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL3C6GUWNANNPEUUID6FM/
- https://security.gentoo.org/glsa/202402-07
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1037(Vendor Advisory)
- https://www.debian.org/security/2022/dsa-5184(Third Party Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain