AE
Product
AMD EPYC™ Embedded 9004 Series Processors
12
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 4
Watch
Add AMD EPYC™ Embedded 9004 Series Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36354 | 7.5 | Sep 6 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or… Affected: All versions, or not specified |
| CVE-2025-54510 | 5.9 | Apr 16 | A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen… Affected: All versions, or not specified |
| CVE-2024-21953 | 5.9 | Feb 10 | Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity Affected: All versions, or not specified |
| CVE-2023-20585 | 5.6 | Apr 16 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP… Affected: All versions, or not specified |
| CVE-2024-36357 | 5.6 | Jul 8 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information… Affected: All versions, or not specified |
| CVE-2024-36350 | 5.6 | Jul 8 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information Affected: All versions, or not specified |
| CVE-2023-31351 | 5.3 | Sep 6 | Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity Affected: All versions, or not specified |
| CVE-2025-0031 | 4.6 | Feb 10 | A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent… Affected: All versions, or not specified |
| CVE-2024-36348 | 3.8 | Jul 8 | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially… Affected: All versions, or not specified |
| CVE-2024-36349 | 3.8 | Jul 8 | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information… Affected: All versions, or not specified |
| CVE-2024-36331 | 3.2 | Sep 6 | Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity Affected: All versions, or not specified |
| CVE-2024-21977 | 3.2 | Sep 5 | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity… Affected: All versions, or not specified |
Showing 12
