This transient execution vulnerability in AMD CPUs enables a local user-privileged attacker to read data in the floating point divisor unit, potentially allowing the exfiltration of sensitive information. The flaw is a data leakage weakness identified as CWE‑1420 and could lead to loss of confidentiality, with no reported impact on integrity or availability.

AMD EPYC 7001 Series Processors and AMD EPYC Embedded 3000 Series Processors are affected. Version details are not provided in the advisory.

The CVSS score is 2, indicating low severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Because the attack requires local privileged execution, the likely attack vector is local, and no publicly known exploits exist, so the exploitation probability remains low.