Amd Ryzen Threadripper 3000 Processors (Amd) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-15. Vendor: Amd.
CVEs of Amd Ryzen Threadripper 3000 Processors
- CVE-2025-48516 - CVSS 6.9 (medium), 2026-05-15: Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the…
- CVE-2026-0432 - CVSS 8.5 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in…
- CVE-2025-62625 - CVSS 6 (medium), 2026-05-14: Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in…
- CVE-2025-62619 - CVSS 6.3 (medium), 2026-05-14: Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys,…
- CVE-2025-29949 - CVSS 4.8 (medium), 2026-02-10: Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds…
- CVE-2024-36354 - CVSS 7.5 (high), 2025-09-06: Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a…
- CVE-2024-21947 - CVSS 7.5 (high), 2025-09-06: Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in…
- CVE-2024-21970 - CVSS 4.4 (medium), 2025-09-06: Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a…
- CVE-2023-31330 - CVSS 2.5 (low), 2025-09-06: An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in…
- CVE-2023-20599 - CVSS 7.9 (high), 2025-06-10: Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86…
