Skip to content

Vulnerabilities of AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors

Is your version affected?

CVE Summary Score Published
CVE-2024-36343 Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to… 4.6 Medium May 19, 2026
CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… 6.9 Medium May 15, 2026
CVE-2025-0045 Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… 6.9 Medium May 15, 2026
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High May 15, 2026
CVE-2024-36345 Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged… 4.6 Medium May 15, 2026
CVE-2026-0438 A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory 5.4 Medium May 15, 2026
CVE-2025-62619 Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the… 6.3 Medium May 14, 2026
CVE-2025-62625 Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… 6.0 Medium May 14, 2026
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High Apr 16, 2026
CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… 8.7 High Feb 12, 2026
CVE-2024-36355 Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify… 7.0 High Feb 10, 2026
CVE-2024-36310 Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds… 4.6 Medium Feb 10, 2026
CVE-2025-29950 Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory… 7.1 High Feb 10, 2026
CVE-2023-31330 An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to… 2.5 Low Sep 6, 2025
CVE-2024-36357 A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,… 5.6 Medium Jul 8, 2025
CVE-2024-36350 A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores,… 5.6 Medium Jul 8, 2025
CVE-2024-36348 A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers… 3.8 Low Jul 8, 2025
CVE-2024-36349 A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a… 3.8 Low Jul 8, 2025
CVE-2024-36347 Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator… 6.4 Medium Jun 27, 2025
CVE-2024-0179 SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to… 8.2 High Feb 11, 2025
CVE-2024-21925 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,… 8.2 High Feb 11, 2025
CVE-2024-21924 SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services… 8.2 High Feb 11, 2025

Other AMD products