AMD AMD EPYC™ 7002 Series Processors vulnerabilities

CVE-2025-54518 High · 7.0 CWE-1189 May 15, 2026

Improper isolation of shared resources within the CPU operation cache on Zen 2-based…

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

CVE-2026-0432 High · 8.5 CWE-276 May 14, 2026

Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

CVE-2025-48512 High · 7.0 CWE-276 May 14, 2026

Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")

Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

CVE-2025-54502 High · 7.5 CWE-668 Apr 16, 2026

Exposure of Resource to Wrong Sphere in AMD AMD EPYC™ 9004 Series Processors

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

CVE-2023-31364 High · 8.3 CWE-119 Feb 26, 2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in AMD AMD EPYC™ 7001 Series Processors

Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.

CVE-2024-21961 Medium · 6.0 CWE-119 Feb 12, 2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in AMD AMD EPYC™ 7002 Series Processors

Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial of service attack against the host resulting in loss of availability.

CVE-2025-52533 High · 8.7 CWE-1191 Feb 12, 2026

Improper Access Control in an on-chip debug interface could allow a privileged attacker…

Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.

CVE-2025-29950 High · 7.1 CWE-1274 Feb 10, 2026

Improper input validation in system management mode (SMM) could allow a privileged…

Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.