AMD AMD EPYC™ 4004 Series Processors vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting AMD AMD EPYC™ 4004 Series Processors: 7 record(s), with affected versions and fixes.
CVE-2024-21962
High · 8.6
CWE-1220 May 15, 2026
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an…
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
CVE-2026-0438
Medium · 5.4
CWE-1072 May 14, 2026
A System Management Mode (SMM) handler could perform a callout to code located in…
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.
CVE-2026-0432
High · 8.5
CWE-276 May 14, 2026
Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
CVE-2025-48521
Medium · 6.9
CWE-416 May 14, 2026
Use After Free in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.
CVE-2025-48512
High · 7.0
CWE-276 May 14, 2026
Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
CVE-2025-0045
Medium · 6.9
CWE-120 May 14, 2026
Classic Buffer Overflow in AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial of service
CVE-2025-54502
High · 7.5
CWE-668 Apr 16, 2026
Exposure of Resource to Wrong Sphere in AMD AMD EPYC™ 9004 Series Processors
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.