Phoenix-Rowhammer-Attack-CVE-2025-6202

This article examines the systemic cryptographic security threats posed by the Phoenix Rowhammer attack CVE-2025-6202, which can extract private keys from DDR5 RAM through hardware-level bit manipulation. In recent years, the dynamic development of cryptocurrency technologies has led to an...

prism

Loaded Dice: Solving the Non-Selection Problem for Scalable Probabilistic RowHammer Defense To appear in the 53rd International Symposium on Computer Architecture ISCA, 2026. Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 University of British Columbia 2 NVIDIA Equal contribution...

RAMnesia-Attack

This research presents a comprehensive analysis of two critical classes of attacks on the hardware memory of modern computer systems using DDR5 memory: Phoenix Rowhammer Attack CVE-2025-6202 and RAMnesia Attack CVE-2023-39910 . Both attacks demonstrate fundamental vulnerabilities in the processin...

DDRop: Active Memory Interposer Attacks on Confidential VMs by Dropping DDR5 Writes

Trusted Execution Environments TEEs are increasingly deployed in the cloud to protect sensitive workloads through hardware-enforced isolation, remote attestation, and transparent memory encryption. However, to meet memory performance and size demands, modern TEEs omit cryptographic freshness...

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop , that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who...

Physical Memory Fault Injection Attacks on DDR5

Revisions Revision Date| Description ---|--- 2026-09-14| Initial version...

CVE-2025-48516

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module...

CVE-2025-48516

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module...

CVE-2025-48516

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module...

CVE-2025-48516

CVE-2025-48516 : The AMD AMD/AGESA Bootloader Firmware DDR5 memory module has an insecure default configuration state that enables an attacker with local privileges to abuse an unprotected PMIC interface, potentially causing a permanent denial of service or affecting memory integrity. The descrip...

CVE-2025-48516: Incorrect Default Permissions

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module...

SK Hynix DDR5 Rowhammer Attack

The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...

Exploit for CVE-2025-6202

This article examines the systemic cryptographic security threat...

Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds

A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 DDR5 memory chips from South Korean semiconductor vendor SK Hynix. The RowHammer attack variant, codenamed Phoenix CVE-2025-6202, CVSS score: 7.1, is capable of bypassing...

CVE-2025-6202

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12...

CVE-2025-6202: Improper Resource Shutdown or Release

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12...

PT-2025-37707

Name of the Vulnerable Software and Affected Versions SK Hynix DDR5 versions produced from January 2021 through December 2024 Description A vulnerability exists in SK Hynix DDR5 memory, allowing a local attacker to trigger Rowhammer bit flips, impacting hardware integrity and system security. The...

AMD Response to “ZENHAMMER: Rowhammer Attacks on AMD Zen-Based Platforms”

AMD ID: AMD-SB-7021 Potential Impact: Memory integrity Severity: N/A Summary On February 26, 2024, AMD received new research related to an industry-wide DRAM issue documented in “ZENHAMMER: Rowhammering Attacks on AMD Zen-based Platforms” from researchers at ETH Zurich. The research demonstrates...