Advisories · Technology
AMD Ryzen™ Threadripper™ 7000 Processors.
Every CVE that names AMD Ryzen™ Threadripper™ 7000 Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.6 Medium
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message,…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- CWE-208
- CVSS 4.6 Medium
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memo…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- Memory corruption
- CVSS 6.9 Medium
Buffer overflow in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.5 High
Incorrect default permissions in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Broken access control
- CVSS 4.6 Medium
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confident…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- CWE-1274
- CVSS 5.4 Medium
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory.
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
- CWE-1072
- CVSS 8.7 High
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 7002 Series Processors
- CWE-1191
- CVSS 4.6 Medium
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or int…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 9005 Series Processors
- Memory corruption
- CVSS 7.1 High
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1274
- CVSS 2.5 Low
Out-of-bounds read in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption