Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
POC_CVE-2025-29943_Write-what-where-Condition — Proof-of-concept for CVE-2025-29943 exploiting an undocumented stack engine bit in AMD Zen CPUs to corrupt the stack pointer in SEV-SNP protected VMs, enabling arbitrary code execution and privilege escalation. | Kitploit
Tools/GitHubGitHub/fevar54/poc_cve-2025-29943_write-what-where-condition
Privilege EscalationVulnerability AnalysisExploitationCloud SecurityHardware SecurityBinary Exploitation
GitHubfevar54/poc_cve-2025-29943_write-what-where-condition

POC_CVE-2025-29943_Write-what-where-Condition

Proof-of-concept for CVE-2025-29943 exploiting an undocumented stack engine bit in AMD Zen CPUs to corrupt the stack pointer in SEV-SNP protected VMs, enabling arbitrary code execution and privilege escalation.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
47 months agoNot yet reviewed

StackWarp: PoC for CVE-2025-29943

Proof of concept for the StackWarp hardware vulnerability (CVE-2025-29943) in AMD processors. This flaw allows an attacker with administrator privileges on a host (hypervisor) to manipulate the CPU pipeline configuration to corrupt the stack pointer within a SEV-SNP guest virtual machine, leading to privilege escalation and arbitrary code execution.

📋 Vulnerability Summary

  • ID: CVE-2025-29943
  • Product: AMD EPYC Processors (Series 7003, 8004, 9004, 9005 and their Embedded variants)
  • Affected Architectures: AMD Zen 1 to Zen 5
  • CWE-ID: CWE-123 (Write-what-where Condition)
  • Severity (CVSS 4.0): 4.6 (Medium)
  • Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

The vulnerability lies in a microarchitectural optimization (the stack engine) and can be triggered by an undocumented control bit. A malicious hypervisor can exploit it to alter the control flow and data within a confidential virtual machine (CVM), bypassing SEV-SNP integrity guarantees without needing to decrypt its memory.

🚨 Impact

  • Control Hijacking: Allows arbitrary code execution inside a SEV-SNP virtual machine.
  • Privilege Escalation: An attacker can go from user to kernel within the compromised VM.
  • Secret Theft: It is possible to exfiltrate cryptographic keys (e.g., RSA-2048) and other sensitive data.
  • Cloud Environment Compromise: Threatens the integrity of CVMs in cloud providers using AMD hardware.
Download Tool