Aller au contenu

Vulnérabilités de AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-36343 Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to… 4.6 Moyenne 19 mai 2026
CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… 6.9 Moyenne 15 mai 2026
CVE-2025-0045 Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… 6.9 Moyenne 15 mai 2026
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 Élevée 15 mai 2026
CVE-2024-36345 Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged… 4.6 Moyenne 15 mai 2026
CVE-2026-0438 A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory 5.4 Moyenne 15 mai 2026
CVE-2025-62619 Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the… 6.3 Moyenne 14 mai 2026
CVE-2025-62625 Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… 6.0 Moyenne 14 mai 2026
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 Élevée 16 avr. 2026
CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… 8.7 Élevée 12 févr. 2026
CVE-2024-36355 Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify… 7.0 Élevée 10 févr. 2026
CVE-2024-36310 Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds… 4.6 Moyenne 10 févr. 2026
CVE-2025-29950 Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory… 7.1 Élevée 10 févr. 2026
CVE-2023-31330 An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to… 2.5 Faible 6 sept. 2025
CVE-2024-36357 A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,… 5.6 Moyenne 8 juil. 2025
CVE-2024-36350 A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores,… 5.6 Moyenne 8 juil. 2025
CVE-2024-36348 A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers… 3.8 Faible 8 juil. 2025
CVE-2024-36349 A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a… 3.8 Faible 8 juil. 2025
CVE-2024-36347 Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator… 6.4 Moyenne 27 juin 2025
CVE-2024-0179 SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to… 8.2 Élevée 11 févr. 2025
CVE-2024-21925 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,… 8.2 Élevée 11 févr. 2025
CVE-2024-21924 SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services… 8.2 Élevée 11 févr. 2025

Autres produits AMD