AMD AMD EPYC™ 9005 Series Processors
En bref
- Source
- NVD
- EPSS
- EPSS 0.15 % · centile 4 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Deferred
Rechercher sur…
Description
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
Faiblesses (CWE)
- CWE-459 — Nettoyage incomplet
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.2 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N | AMD |
| CVSS 3.1 | HIGH 7.2 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N | NVD · psirt@amd.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2025-27086
- GCVE · GCVE-0-2025-0032
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD EPYC™ 9005 Series Processors | unaffected TurinPI 1.0.0.4 |
| AMD · AMD Ryzen™ AI 300 Series Processors | unaffected StrixKrackanPI-FP8_1.1.0.1b |
| AMD · AMD Ryzen™ 9000 Series Desktop Processors | unaffected ComboAM5PI 1.2.0.3c |
| AMD · AMD Ryzen™ 9000HX Series Processors | unaffected FireRangeFL1PI 1.0.0.0a |
| AMD · AMD Ryzen™ Al Max+ | unaffected StrixHaloPI-FP11_1.0.0.1 |
| AMD · AMD Ryzen™ Threadripper™ 9000 series | unaffected ShimadaPeakPI-SP6 1.0.0.1 |
| AMD · AMD EPYC™ Embedded 9000 Series Processors | unaffected Embturin PI 1.0.0.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |