AMD AMD EPYC™ 4004 Series Processors

10 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2024-21962Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in pHIGH 8.60.1 %
CVE-2025-0045Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potMEDIUM 6.90.1 %
CVE-2026-0432Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalatiHIGH 8.50.1 %
CVE-2025-48521Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) conditMEDIUM 6.90.1 %
CVE-2025-48512Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attackHIGH 7.00.1 %
CVE-2026-0438A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker couMEDIUM 5.40.1 %
CVE-2025-54502Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (HIGH 7.10.1 %
CVE-2024-36354Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sysHIGH 7.50.2 %
CVE-2024-36348allA transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMILOW 3.80.3 %
CVE-2024-36349allA transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, poteLOW 3.80.2 %