Known vulnerabilities in AMD EPYC™ Embedded 7003 Series Processors
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-61971 | Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing… | 5.9 Medium | May 13, 2026 |
| CVE-2025-54502 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… | 7.1 High | Apr 16, 2026 |
| CVE-2025-54510 | A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with… | 5.9 Medium | Apr 16, 2026 |
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised… | 5.6 Medium | Apr 16, 2026 |
| CVE-2023-31364 | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… | 8.3 High | Feb 26, 2026 |
| CVE-2025-52533 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… | 8.7 High | Feb 12, 2026 |
| CVE-2025-0031 | A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the… | 4.6 Medium | Feb 10, 2026 |
| CVE-2025-48514 | Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to… | 4.0 Medium | Feb 10, 2026 |
| CVE-2025-48509 | Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause… | 1.8 Low | Feb 10, 2026 |
| CVE-2025-29939 | Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the… | 6.9 Medium | Feb 10, 2026 |
| CVE-2025-29950 | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory… | 7.1 High | Feb 10, 2026 |
| CVE-2025-52536 | Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware… | 6.7 Medium | Feb 10, 2026 |
| CVE-2025-29943 | Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the… | 4.6 Medium | Jan 16, 2026 |
| CVE-2025-29934 | A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries,… | 5.3 Medium | Nov 21, 2025 |
| CVE-2024-36354 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access,… | 7.5 High | Sep 6, 2025 |
| CVE-2023-31351 | Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory… | 5.3 Medium | Sep 6, 2025 |
| CVE-2024-21977 | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the… | 3.2 Low | Sep 5, 2025 |
| CVE-2024-36357 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,… | 5.6 Medium | Jul 8, 2025 |
| CVE-2024-36350 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores,… | 5.6 Medium | Jul 8, 2025 |
| CVE-2024-36348 | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers… | 3.8 Low | Jul 8, 2025 |
| CVE-2024-36349 | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a… | 3.8 Low | Jul 8, 2025 |
| CVE-2023-20599 | Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto… | 7.9 High | Jun 10, 2025 |
| CVE-2024-21981 | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained… | 5.7 Medium | Aug 13, 2024 |
| CVE-2023-20591 | Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist,… | 6.5 Medium | Aug 13, 2024 |
| CVE-2021-46772 | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to… | 3.9 Low | Aug 13, 2024 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 33