# AMD EPYC™ 7003 Series Processors.

Every CVE that names AMD EPYC™ 7003 Series Processors among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper input validation in AMD EPYC™ 7003 Series Processors and others](https://agentprime.io/advisories/CVE-2024-21944.md)
  `CVE-2024-21944` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-20
- [Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.](https://agentprime.io/advisories/CVE-2025-61971.md)
  `CVE-2025-61971` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-1233
- [Resource exposure in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-54502.md)
  `CVE-2025-54502` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, CWE-648
- [A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, poten…](https://agentprime.io/advisories/CVE-2025-54510.md)
  `CVE-2025-54510` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-414
- [Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in…](https://agentprime.io/advisories/CVE-2023-20585.md)
  `CVE-2023-20585` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 3 more · CVSS 5.6 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Memory corruption
- [Buffer overflow in AMD EPYC™ 7001 Series Processors and others](https://agentprime.io/advisories/CVE-2023-31364.md)
  `CVE-2023-31364` · CVE record: AMD AMD EPYC™ 7001 Series Processors and 4 more · CVSS 8.3 High · Not analysed yet · Published 26 Feb 2026 · Tags: Memory corruption
- [Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.](https://agentprime.io/advisories/CVE-2025-52533.md)
  `CVE-2025-52533` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 8.7 High · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-1191
- [Use after free in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-0031.md)
  `CVE-2025-0031` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.](https://agentprime.io/advisories/CVE-2025-48514.md)
  `CVE-2025-48514` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1220
- [Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…](https://agentprime.io/advisories/CVE-2025-48509.md)
  `CVE-2025-48509` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 1.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-665
- [Improper access control in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-29939.md)
  `CVE-2025-29939` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Broken access control
- [Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.](https://agentprime.io/advisories/CVE-2025-29950.md)
  `CVE-2025-29950` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 7.1 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1274
- [Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.](https://agentprime.io/advisories/CVE-2025-52536.md)
  `CVE-2025-52536` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1231
- [Buffer overflow in AMD EPYC™ 7003 Series Processors and others](https://agentprime.io/advisories/CVE-2023-31351.md)
  `CVE-2023-31351` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2025 · Tags: Memory corruption
- [Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others](https://agentprime.io/advisories/CVE-2024-21977.md)
  `CVE-2024-21977` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 3.2 Low · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-459
- [A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged bounda…](https://agentprime.io/advisories/CVE-2024-36357.md)
  `CVE-2024-36357` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1421
- [A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.](https://agentprime.io/advisories/CVE-2024-36350.md)
  `CVE-2024-36350` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1421
- [A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…](https://agentprime.io/advisories/CVE-2024-36348.md)
  `CVE-2024-36348` · CVE record: AMD AMD EPYC™ 7002 Series Processors and 4 more · CVSS 3.8 Low · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1420
- [A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.](https://agentprime.io/advisories/CVE-2024-36349.md)
  `CVE-2024-36349` · CVE record: AMD AMD EPYC™ 7002 Series Processors and 4 more · CVSS 3.8 Low · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1420
- [Insecure direct object reference in AMD EPYC™ 7001 Series Processors and others](https://agentprime.io/advisories/CVE-2024-21981.md)
  `CVE-2024-21981` · CVE record: AMD AMD EPYC™ 7001 Series Processors and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: Broken access control
- [Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in…](https://agentprime.io/advisories/CVE-2023-20591.md)
  `CVE-2023-20591` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-665
- [Out-of-bounds read in AMD EPYC™ 7002 Series Processors and others](https://agentprime.io/advisories/CVE-2021-46772.md)
  `CVE-2021-46772` · CVE record: AMD AMD EPYC™ 7002 Series Processors and 4 more · CVSS 3.9 Low · Not analysed yet · Published 13 Aug 2024 · Tags: Memory corruption
- [Incorrect authorization in AMD EPYC™ 7001 Series Processors and others](https://agentprime.io/advisories/CVE-2021-26387.md)
  `CVE-2021-26387` · CVE record: AMD AMD EPYC™ 7001 Series Processors and 4 more · CVSS 3.9 Low · Not analysed yet · Published 13 Aug 2024 · Tags: Broken access control
- [Out-of-bounds write in AMD EPYC™ 7001 Series Processors and others](https://agentprime.io/advisories/CVE-2021-26344.md)
  `CVE-2021-26344` · CVE record: AMD AMD EPYC™ 7001 Series Processors and 4 more · CVSS 7.2 High · Not analysed yet · Published 13 Aug 2024 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=amd-epyctm-7003-series-processors>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/amd-epyctm-7003-series-processors/>. Everything for agents: <https://agentprime.io/llms.txt>.