CVE-2025-6202

Published Sep 15, 2025

Last updated 9 days ago

SK Hynix

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-6202 is a vulnerability in SK Hynix DDR5 memory on x86 platforms. It allows a local attacker to trigger Rowhammer bit flips, which can compromise hardware integrity and system security. The vulnerability affects DDR5 DIMMs produced between January 2021 and December 2024. This vulnerability, also known as the Phoenix attack, bypasses existing Rowhammer defenses in DDR5 memory. Repeated access to a row of memory can cause bit flips in adjacent rows, leading to data corruption. It has been proven that on-die ECC does not prevent Rowhammer attacks, making end-to-end attacks possible even with DDR5 memory.

Description: Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.
Source: vulnerability@ncsc.ch
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 7.1
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-404

Hype score: Not currently trending

References