Amperecomputing vulnerabilities
We track 3 vulnerabilities in Amperecomputing products across 15 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2025.
Latest Amperecomputing vulnerabilities
- 9.8 Critical severity
Ampereone A192-32m Firmware: Out-of-bounds Write
Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an out-of-bounds write within the UEFI-MM Sec
- 9.8 Critical severity
Ampereone A192-32m Firmware: Out-of-bounds Write
Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PCIe driver’s S-EL0 addre
- 7.8 High severity
Ampere Altra Firmware: Observable Discrepancy
Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.