Skip to contentAmd Epyc™ Embedded 7002 vulnerabilities
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ 7001 series processors +44 more +46 moreAn out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt...CVE-2024-21963Fix available6.0 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +48 more +50 moreMissing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use...CVE-2024-363094.6 Medium
- amd epyc™ 7001 series processors, epyc™ 7002 series processors, epyc™ 7003 series processors +6 more +8 moreInsufficient verification of data authenticity may allow a local attacker to bypass Secure Debug...CVE-2025-00088.4 High
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +31 more +33 moreA heap overflow in SMM module may allow an attacker with access to a second vulnerability that...CVE-2023-205777.4 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 moreImproper isolation of shared resources within the CPU operation cache on Zen 2-based products...CVE-2025-54518Fix available7.3 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 moreIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could...CVE-2025-545027.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +30 more +32 moreImproper handling of direct memory writes in the input-output memory management unit could allow...CVE-2023-313648.3 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 moreImproper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow...CVE-2024-219616.0 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 moreImproper Access Control in an on-chip debug interface could allow a privileged attacker to enable...CVE-2025-525338.7 High
- amd epyc™ 7001 series processors, epyc™ 7002 series processors, epyc™ 7003 series processors +17 more +19 moreImproper input validation in system management mode (SMM) could allow a privileged attacker to...CVE-2025-299507.1 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +33 more +35 moreImproper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker...CVE-2024-363547.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +29 more +31 moreA transient execution vulnerability in some AMD processors may allow a user process to infer the...CVE-2024-363483.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ embedded 3000 series processors +35 more +37 moreA transient execution vulnerability in some AMD processors may allow a user process to infer...CVE-2024-363493.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series +43 more +45 moreImproper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with...CVE-2024-36347Fix available6.4 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors, epyc™ embedded 7002 series processors +7 more +9 moreImproper register access control in ASP may allow a privileged attacker to perform unauthorized...CVE-2023-205997.9 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +34 more +36 moreImproper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to...CVE-2024-219258.2 High
- amd epyc™ 7002 processors, epyc™ embedded 7002 processors, ryzen™ threadripper™ pro 3000wx series processors +2 more +4 moreSMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...CVE-2024-219248.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access...CVE-2024-219815.7 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors +24 more +26 moreInsufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS...CVE-2021-467723.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...CVE-2021-467465.2 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +28 more +30 moreInsufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD...CVE-2021-263873.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 moreFailure to validate the value in APCB may allow a privileged attacker to tamper with the APCB...CVE-2021-263451.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium