AMD EPYC™ 7001 Series Processors vulnerabilities
7 known vulnerabilities in AMD EPYC™ 7001 Series Processors from AMD. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.4 High severity
AMD EPYC™ 7003 Series Processors: Improper Verification of Cryptographic Signature
Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.
- 8.5 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Incorrect Default Permissions
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
- 7.0 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Incorrect Default Permissions
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
- 8.3 High severity
AMD EPYC™ 7001 Series Processors: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.
- 8.7 High severity
AMD EPYC™ 7003 Series Processors: On-Chip Debug and Test Interface With Improper Access Control
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- 7.1 High severity
AMD EPYC™ 9004 Series Processors: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- 7.5 High severity
AMD Ryzen™ Threadripper™ 3000 Processors: Improper Prevention of Lock Bit Modification
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially re