CVE-2025-6202

Phoenix: Rowhammer attack on Hynix DDR5 devices

State: Published
Severity: 7.1 High
Published: Sep 15, 2025
Updated: Sep 15, 2025
Reserved: Jun 17, 2025

Description

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H	NCSC.ch

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
DDR5SK Hynix	DIMMs produced from 2021-1 until 2024-12Affected

References

https://comsec.ethz.ch/phoenix
https://security.googleblog.com/2025/09/supporting-rowhammer-research-to.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.