CVE-2025-29950

Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

Score

CVSS 4.0 7.1 High

Status

Deferred - psirt@amd.com

Published

2026-02-10

Last modified

2026-02-26

Weaknesses

CWE-1274

Affected products

• Amd Epyc 7001 Series Processors (Amd)
• Amd Epyc 7002 Series Processors (Amd)
• Amd Epyc 7003 Series Processors (Amd)
• Amd Epyc 9004 Series Processors (Amd)
• Amd Epyc 9005 Series Processors (Amd)
• Amd Epyc 9v64h Processor (Amd)
• Amd Epyc Embedded 3000 Series Processors (Amd)
• Amd Epyc Embedded 7002 Series Processors (Amd)
• Amd Epyc Embedded 7003 Series Processors (Amd)
• Amd Epyc Embedded 8004 Series Processors (Amd)
• Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Bergamo (Amd)
• Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Genoa (Amd)
• Amd Epyc Embedded 9005 Series Processors (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Ryzen Threadripper 7000 Processors (Amd)
• Amd Ryzen Threadripper 9000 Processors (Amd)
• Amd Ryzen Threadripper Pro 3000wx Processors (Amd)
• Amd Ryzen Threadripper Pro 5000 Wx-series Processors (Amd)
• Amd Ryzen Threadripper Pro 7000 Wx-series Processors (Amd)
• Amd Ryzen Threadripper Pro 9000 Wx-series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html