AMD AMD EPYC™ 9005 Series Processors
At a glance
- Source
- NVD
- EPSS
- EPSS 0.15 % · percentile 4 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- AMD
- NVD status
- Deferred
Description
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
Weaknesses (CWE)
- CWE-459 — Incomplete Cleanup
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.2 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N | AMD |
| CVSS 3.1 | HIGH 7.2 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N | NVD · psirt@amd.com (Secondary) |
European references
- ENISA EUVD · EUVD-2025-27086
- GCVE · GCVE-0-2025-0032
Affected products
| Product | Versions |
|---|---|
| AMD · AMD EPYC™ 9005 Series Processors | unaffected TurinPI 1.0.0.4 |
| AMD · AMD Ryzen™ AI 300 Series Processors | unaffected StrixKrackanPI-FP8_1.1.0.1b |
| AMD · AMD Ryzen™ 9000 Series Desktop Processors | unaffected ComboAM5PI 1.2.0.3c |
| AMD · AMD Ryzen™ 9000HX Series Processors | unaffected FireRangeFL1PI 1.0.0.0a |
| AMD · AMD Ryzen™ Al Max+ | unaffected StrixHaloPI-FP11_1.0.0.1 |
| AMD · AMD Ryzen™ Threadripper™ 9000 series | unaffected ShimadaPeakPI-SP6 1.0.0.1 |
| AMD · AMD EPYC™ Embedded 9000 Series Processors | unaffected Embturin PI 1.0.0.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |