Advisories · Technology
3rd Gen AMD Ryzen™ Threadripper™ Processors.
Every CVE that names 3rd Gen AMD Ryzen™ Threadripper™ Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-670
- CVSS 8.8 High
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-691
-
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
- 1st Gen AMD EPYC™ Processors
- 2nd Gen AMD EPYC™ Processors