Advisories · Technology
AMD Ryzen™ Threadripper™ PRO Processor.
Every CVE that names AMD Ryzen™ Threadripper™ PRO Processor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and others
- AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series
- AMD Ryzen™ 6000 Series Mobile Processors and Workstations
- Broken access control
- CVSS 8.8 High
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-670
- CVSS 8.8 High
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-691
-
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
- 1st Gen AMD EPYC™ Processors
- 2nd Gen AMD EPYC™ Processors