# AMD EPYC™ 8004 Series Processors. Every CVE that names AMD EPYC™ 8004 Series Processors among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), p…](https://agentprime.io/advisories/CVE-2025-54509.md) `CVE-2025-54509` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1262 - [Protection mechanism failure in AMD EPYC™ Series 9004 Processors and others](https://agentprime.io/advisories/CVE-2024-36315.md) `CVE-2024-36315` · CVE record: AMD AMD EPYC™ Series 9004 Processors and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-693 - [Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code executio…](https://agentprime.io/advisories/CVE-2025-61972.md) `CVE-2025-61972` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 8.5 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-1233 - [Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.](https://agentprime.io/advisories/CVE-2025-61971.md) `CVE-2025-61971` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-1233 - [Resource exposure in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-54502.md) `CVE-2025-54502` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, CWE-648 - [A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, poten…](https://agentprime.io/advisories/CVE-2025-54510.md) `CVE-2025-54510` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-414 - [Buffer overflow in AMD EPYC™ 7001 Series Processors and others](https://agentprime.io/advisories/CVE-2023-31364.md) `CVE-2023-31364` · CVE record: AMD AMD EPYC™ 7001 Series Processors and 4 more · CVSS 8.3 High · Not analysed yet · Published 26 Feb 2026 · Tags: Memory corruption - [Use after free in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-0031.md) `CVE-2025-0031` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption - [Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.](https://agentprime.io/advisories/CVE-2025-48514.md) `CVE-2025-48514` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1220 - [Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…](https://agentprime.io/advisories/CVE-2025-48509.md) `CVE-2025-48509` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 1.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-665 - [Improper access control in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-29939.md) `CVE-2025-29939` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Broken access control - [Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity.](https://agentprime.io/advisories/CVE-2024-21953.md) `CVE-2024-21953` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1284 - [Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.](https://agentprime.io/advisories/CVE-2025-52536.md) `CVE-2025-52536` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1231 - [Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an…](https://agentprime.io/advisories/CVE-2025-29943.md) `CVE-2025-29943` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-123 - [Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-29934.md) `CVE-2025-29934` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-459 - [Buffer overflow in AMD EPYC™ 7003 Series Processors and others](https://agentprime.io/advisories/CVE-2023-31351.md) `CVE-2023-31351` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2025 · Tags: Memory corruption - [Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others](https://agentprime.io/advisories/CVE-2024-21977.md) `CVE-2024-21977` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 3.2 Low · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-459 - [A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged bounda…](https://agentprime.io/advisories/CVE-2024-36357.md) `CVE-2024-36357` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1421 - [A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.](https://agentprime.io/advisories/CVE-2024-36350.md) `CVE-2024-36350` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1421 - [A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…](https://agentprime.io/advisories/CVE-2024-36348.md) `CVE-2024-36348` · CVE record: AMD AMD EPYC™ 7002 Series Processors and 4 more · CVSS 3.8 Low · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1420 - [A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.](https://agentprime.io/advisories/CVE-2024-36349.md) `CVE-2024-36349` · CVE record: AMD AMD EPYC™ 7002 Series Processors and 4 more · CVSS 3.8 Low · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1420 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .