Advisories · Technology
AMD EPYC™ Embedded 9004 Series Processors.
Every CVE that names AMD EPYC™ Embedded 9004 Series Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, poten…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-414
- CVSS 5.6 Medium
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- Memory corruption
- CVSS 4.6 Medium
Use after free in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Memory corruption
- CVSS 5.9 Medium
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 8004 Series Processors
- CWE-1284
- CVSS 3.2 Low
Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ Embedded 9004 Series Processors
- CWE-665
- CVSS 5.3 Medium
Buffer overflow in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- Memory corruption
- CVSS 3.2 Low
Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-459
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged bounda…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421