Advisories · Technology
AMD EPYC™ 7003 Series Processors.
Every CVE that names AMD EPYC™ 7003 Series Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Improper input validation in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processor
- CWE-20
- CVSS 5.9 Medium
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1233
- CVSS 7.1 High
Resource exposure in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Information disclosure
- CWE-648
- CVSS 5.9 Medium
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, poten…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-414
- CVSS 5.6 Medium
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- Memory corruption
- CVSS 8.3 High
Buffer overflow in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption
- CVSS 8.7 High
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 7002 Series Processors
- CWE-1191
- CVSS 4.6 Medium
Use after free in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Memory corruption
- CVSS 4.0 Medium
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1220
- CVSS 1.8 Low
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-665
- CVSS 6.9 Medium
Improper access control in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Broken access control
- CVSS 7.1 High
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1274
- CVSS 6.7 Medium
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1231
- CVSS 5.3 Medium
Buffer overflow in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- Memory corruption
- CVSS 3.2 Low
Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-459
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged bounda…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 5.7 Medium
Insecure direct object reference in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 6.5 Medium
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-665
- CVSS 3.9 Low
Out-of-bounds read in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- Memory corruption
- CVSS 3.9 Low
Incorrect authorization in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 7.2 High
Out-of-bounds write in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption