Amd Ryzen Threadripper 7000 Processors (Amd) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-26. Vendor: Amd.
CVEs of Amd Ryzen Threadripper 7000 Processors
- CVE-2023-20572 - CVSS 5.6 (medium), 2026-06-26: An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code,…
- CVE-2024-36343 - CVSS 4.6 (medium), 2026-05-19: Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or…
- CVE-2025-48516 - CVSS 6.9 (medium), 2026-05-15: Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the…
- CVE-2026-0438 - CVSS 5.4 (medium), 2026-05-15: A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active…
- CVE-2026-0432 - CVSS 8.5 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in…
- CVE-2025-0045 - CVSS 6.9 (medium), 2026-05-15: Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting…
- CVE-2024-36345 - CVSS 4.6 (medium), 2026-05-15: Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read,…
- CVE-2025-62625 - CVSS 6 (medium), 2026-05-14: Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in…
- CVE-2025-54502 - CVSS 7.5 (high), 2026-04-16: Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve…
- CVE-2025-52533 - CVSS 8.7 (high), 2026-02-12: Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data…
- CVE-2025-29950 - CVSS 7.1 (high), 2026-02-10: Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- CVE-2024-36310 - CVSS 4.6 (medium), 2026-02-10: Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially…
- CVE-2023-31330 - CVSS 2.5 (low), 2025-09-06: An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in…
