# AMD EPYC™ 9005 Series Processors. Every CVE that names AMD EPYC™ 9005 Series Processors among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), p…](https://agentprime.io/advisories/CVE-2025-54509.md) `CVE-2025-54509` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1262 - [Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code executio…](https://agentprime.io/advisories/CVE-2025-61972.md) `CVE-2025-61972` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 8.5 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-1233 - [Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.](https://agentprime.io/advisories/CVE-2025-61971.md) `CVE-2025-61971` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-1233 - [Resource exposure in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-54502.md) `CVE-2025-54502` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, CWE-648 - [A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, poten…](https://agentprime.io/advisories/CVE-2025-54510.md) `CVE-2025-54510` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-414 - [Buffer overflow in AMD EPYC™ 7001 Series Processors and others](https://agentprime.io/advisories/CVE-2023-31364.md) `CVE-2023-31364` · CVE record: AMD AMD EPYC™ 7001 Series Processors and 4 more · CVSS 8.3 High · Not analysed yet · Published 26 Feb 2026 · Tags: Memory corruption - [Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or int…](https://agentprime.io/advisories/CVE-2024-36310.md) `CVE-2024-36310` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption - [Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU.](https://agentprime.io/advisories/CVE-2025-29946.md) `CVE-2025-29946` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 1 more · CVSS 4.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1301 - [Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SEV-SNP guest memory…](https://agentprime.io/advisories/CVE-2025-0029.md) `CVE-2025-0029` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 1 more · CVSS 1.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-390 - [Use after free in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-0031.md) `CVE-2025-0031` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption - [Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.](https://agentprime.io/advisories/CVE-2025-48514.md) `CVE-2025-48514` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1220 - [Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.](https://agentprime.io/advisories/CVE-2025-54514.md) `CVE-2025-54514` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1189 - [Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…](https://agentprime.io/advisories/CVE-2025-48509.md) `CVE-2025-48509` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 1.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-665 - [Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity.](https://agentprime.io/advisories/CVE-2025-52534.md) `CVE-2025-52534` · CVE record: AMD AMD EPYC™ 9005 Series Processors · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1284 - [Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in…](https://agentprime.io/advisories/CVE-2025-0012.md) `CVE-2025-0012` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1260 - [Improper access control in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-29939.md) `CVE-2025-29939` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Broken access control - [Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.](https://agentprime.io/advisories/CVE-2025-29950.md) `CVE-2025-29950` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 7.1 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1274 - [Use of uninitialized variable in AMD EPYC™ 9005 Series Processors and others](https://agentprime.io/advisories/CVE-2025-29952.md) `CVE-2025-29952` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption - [Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.](https://agentprime.io/advisories/CVE-2025-52536.md) `CVE-2025-52536` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1231 - [Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potent…](https://agentprime.io/advisories/CVE-2025-48517.md) `CVE-2025-48517` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 1 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1220 - [Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory int…](https://agentprime.io/advisories/CVE-2025-29948.md) `CVE-2025-29948` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1260 - [Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an…](https://agentprime.io/advisories/CVE-2025-29943.md) `CVE-2025-29943` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-123 - [Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insuffic…](https://agentprime.io/advisories/CVE-2025-62626.md) `CVE-2025-62626` · CVE record: AMD AMD Ryzen™ 9000HX Series Processors and 1 more · CVSS 7.2 High · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-333 - [Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others](https://agentprime.io/advisories/CVE-2025-29934.md) `CVE-2025-29934` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-459 - [Incomplete cleanup in AMD EPYC™ 9005 Series Processors and others](https://agentprime.io/advisories/CVE-2025-0032.md) `CVE-2025-0032` · CVE record: AMD AMD EPYC™ 9005 Series Processors and 4 more · CVSS 7.2 High · Not analysed yet · Published 6 Sept 2025 · Tags: CWE-459 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .