Advisories · Technology
AMD EPYC™ 7002 Series Processors.
Every CVE that names AMD EPYC™ 7002 Series Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu…
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- CWE-1189
- CWE-1220
- CVSS 7.1 High
Resource exposure in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Information disclosure
- CWE-648
- CVSS 8.3 High
Buffer overflow in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption
- CVSS 6.0 Medium
Buffer overflow in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.7 High
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 7002 Series Processors
- CWE-1191
- CVSS 7.1 High
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1274
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 7.9 High
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of…
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ Threadripper™ 3000 Processors
- CWE-1262
- CVSS 5.7 Medium
Insecure direct object reference in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 3.9 Low
Out-of-bounds read in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- Memory corruption
- CVSS 3.9 Low
Incorrect authorization in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 7.2 High
Out-of-bounds write in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption