Known vulnerabilities in AMD Ryzen™ Threadripper™ 9000 Processors

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-48516	Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with…	6.9 Medium	May 15, 2026
CVE-2025-0045	Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer…	6.9 Medium	May 15, 2026
CVE-2026-0438	A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory	5.4 Medium	May 15, 2026
CVE-2025-62625	Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download…	6.0 Medium	May 14, 2026
CVE-2025-54502	Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker…	7.1 High	Apr 16, 2026
CVE-2025-54514	Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could…	4.8 Medium	Feb 10, 2026
CVE-2025-29950	Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory…	7.1 High	Feb 10, 2026