What is CVE-2025-6202?

CVE-2025-6202 is a vulnerability in Sk Hynix Ddr5, classified under Improper Resource Shutdown or Release. Published 2025-09-15.

Is CVE-2025-6202 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Sk Hynix Ddr5

CVE-2025-6202

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12.

EPSS: 0.003 (21.3th percentile) — read the EPSS interpretation.

Affected products

Sk Hynix Ddr5 — versions DIMMs produced from 2021-1 until 2024-12

Weakness classification (CWE)

CWE-404 — Improper Resource Shutdown or Release

Public proof-of-concept exploits

demining/RAMnesia-Attack
ARPSyndicate/cve-scores
demining/Phoenix-Rowhammer-Attack-CVE-2025-6202
fkie-cad/nvd-json-data-feeds
nomi-sec/PoC-in-GitHub

References

vulnerability@ncsc.ch
vulnerability@ncsc.ch

Frequently asked questions

What is CVE-2025-6202?: CVE-2025-6202 is a vulnerability in Sk Hynix Ddr5, classified under Improper Resource Shutdown or Release. Published 2025-09-15.
Is CVE-2025-6202 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.