XCA (Interconnect Corruption Attacks) is a family of attacks that tampers with SoC interconnects to break Trusted Execution Environments (TEEs).
 Misconfiguring Infinity Fabric to Break AMD SEV-SNP USENIX Security 2026 đź“„ Paper | đź’» Code |
 Confused Deputy Attack on Infinity Fabric to Break AMD SEV-SNP IEEE S&P 2026 đź“„ Paper |
 Breaking AMD SEV-SNP via Memory Incoherence USENIX Security 2026 đź“„ Paper |
 Breaking AMD SEV-SNP with Device-as-Memory ACM CCS 2026 đź“„ Paper |
We have worked closely with AMD to address these vulnerabilities.
- BreakFAST: Assigned CVE-2025-61971 and CVE-2025-61972. AMD Advisory (AMD-SB-3030)
- Fabricked: Assigned CVE-2025-54510. AMD Advisory (AMD-SB-3034)
- Staleus: Assigned CVE-2025-54509. AMD Advisory (AMD-SB-3039)
- MIOR: Assigned CVE-2026-0462. AMD Advisory (AMD-SB-3059)
This research is conducted by the Secure and Trustworthy Systems Group at ETH Zurich.
For more technical details visit our project website:
👉 xca-attacks.github.io
@inproceedings{schlueter2026staleus,
title={{Staleus: Breaking AMD SEV-SNP via Memory Incoherence}},
author={Benedict SchlĂĽter and Shweta Shinde},
booktitle={35th USENIX Security Symposium (USENIX Security 26)},
year={2026},
month = aug,
address = {Baltimore, MD},
publisher = {USENIX Association},
}
@inproceedings{schlueter2026fabricked,
title={{Fabricked: Misconfiguring Infinity Fabric to Break AMD SEV-SNP}},
author={Benedict SchlĂĽter and Christoph Wech and Shweta Shinde},
booktitle={35th USENIX Security Symposium (USENIX Security 26)},
year={2026},
month = aug,
address = {Baltimore, MD},
publisher = {USENIX Association},
}
@inproceedings{giersfeld2026breakfast,
title={{BreakFAST: Confused Deputy Attack on Infinity Fabric to Break AMD SEV-SNP}},
author={Philipp Giersfeld and Benedict Schl\"uter and Shweta Shinde},
booktitle={47th IEEE Symposium on Security and Privacy (S\&P 26)},
year={2026},
month = may,
address = {San Francisco, CA},
publisher = {IEEE},
}
@inproceedings{wech2026mior,
title = {{Mior: Breaking AMD SEV-SNP with Device-as-Memory}},
author = {Chris Wech and Philipp Giersfeld and Benedict SchlĂĽter and Shweta Shinde},
booktitle = {Proceedings of the 2026 ACM SIGSAC Conference on Computer and Communications Security},
year = {2026},
month = nov,
address = {The Hague, Netherlands},
publisher = {Association for Computing Machinery},
doi = {10.1145/3830454.3846723},
}