AE
Product
AMD EPYC™ 4004 Series Processors
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 2
Watch
Add AMD EPYC™ 4004 Series Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21962 | 8.6 | May 15 | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code… Affected: All versions, or not specified |
| CVE-2026-0432 | 8.5 | May 15 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code… Affected: All versions, or not specified |
| CVE-2025-54502 | 7.5 | Apr 16 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation… Affected: All versions, or not specified |
| CVE-2024-36354 | 7.5 | Sep 6 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or… Affected: All versions, or not specified |
| CVE-2025-48512 | 7.0 | May 15 | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation… Affected: All versions, or not specified |
| CVE-2025-0045 | 6.9 | May 15 | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial… Affected: All versions, or not specified |
| CVE-2025-48521 | 6.9 | May 15 | Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of… Affected: All versions, or not specified |
| CVE-2026-0438 | 5.4 | May 15 | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory Affected: All versions, or not specified |
| CVE-2024-36348 | 3.8 | Jul 8 | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially… Affected: All versions, or not specified |
| CVE-2024-36349 | 3.8 | Jul 8 | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information… Affected: All versions, or not specified |
Showing 10
