Skip to content

Known vulnerabilities in AMD EPYC™ Embedded 8004 Series Processors

Is your version affected?

CVE Summary Score Published
CVE-2025-54509 Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a… 4.0 Medium Jun 9, 2026
CVE-2025-0045 Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… 6.9 Medium May 15, 2026
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High May 15, 2026
CVE-2025-48521 Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a… 6.9 Medium May 15, 2026
CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High May 15, 2026
CVE-2024-36315 Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and… 5.7 Medium May 13, 2026
CVE-2025-61972 Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System… 8.5 High May 13, 2026
CVE-2025-61971 Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing… 5.9 Medium May 13, 2026
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High Apr 16, 2026
CVE-2025-54510 A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with… 5.9 Medium Apr 16, 2026
CVE-2023-31364 Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… 8.3 High Feb 26, 2026
CVE-2025-0031 A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the… 4.6 Medium Feb 10, 2026
CVE-2025-48514 Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to… 4.0 Medium Feb 10, 2026
CVE-2025-48509 Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause… 1.8 Low Feb 10, 2026
CVE-2025-29939 Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the… 6.9 Medium Feb 10, 2026
CVE-2025-29950 Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory… 7.1 High Feb 10, 2026
CVE-2025-52536 Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware… 6.7 Medium Feb 10, 2026
CVE-2025-29934 A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries,… 5.3 Medium Nov 21, 2025
CVE-2024-36357 A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,… 5.6 Medium Jul 8, 2025
CVE-2024-36350 A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores,… 5.6 Medium Jul 8, 2025
CVE-2024-36348 A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers… 3.8 Low Jul 8, 2025
CVE-2024-36349 A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a… 3.8 Low Jul 8, 2025

Other AMD products