Is CVE-2025-62863 actively exploited?

CVE-2025-62863 has no public evidence of in-the-wild exploitation as of 2026-01-13.

What is the CVSS score for CVE-2025-62863?

CVE-2025-62863 has a CVSS score of 9.8 (CRITICAL severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2025-62863?

Patch guidance is available from amperecomputing security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2025-62863.

Fix CVE-2025-62863 - CRITICAL

Q: Which products are affected by CVE-2025-62863?

14 products: amperecomputing ampereone a192-32m firmware, amperecomputing ampereone a192-26m firmware, amperecomputing ampereone a160-28m firmware, amperecomputing ampereone a144-33m firmware, amperecomputing ampereone a144-26m firmware, and 9 more.

Description

Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PCIe driver’s S-EL0 address space.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-787 · Out-of-bounds Write

Metadata

Primary Vendor: AMPERECOMPUTING
Published: 12/16/2025
Last Modified: 1/13/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

amperecomputing : ampereone_a192-32m_firmwareamperecomputing : ampereone_a192-26m_firmwareamperecomputing : ampereone_a160-28m_firmwareamperecomputing : ampereone_a144-33m_firmwareamperecomputing : ampereone_a144-26m_firmwareamperecomputing : ampereone_a96-36m_firmwareamperecomputing : ampereone_a96-36x_firmwareamperecomputing : ampereone_a128-34x_firmwareamperecomputing : ampereone_a144-24x_firmwareamperecomputing : ampereone_a144-27x_firmwareamperecomputing : ampereone_a160-28x_firmwareamperecomputing : ampereone_a192-26x_firmwareamperecomputing : ampereone_a192-26x_firmwareamperecomputing : ampereone_a192-32x_firmware

Remediation Guidance

Executive Summary

View on NIST NVD