Riskcovery

CVE-2025-29950

State
Published
Severity
7.1 High
Published
Feb 10, 2026
Updated
Feb 26, 2026
Reserved
Mar 12, 2025

Read the record on cve.org

Description

Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NAMD

Weaknesses

  • CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code

Affected Products

ProductVersions
AMD EPYC™ 9004 Series ProcessorsAMD
  • GenoaPI 1.0.0.GNot affected
AMD EPYC™ 7003 Series ProcessorsAMD
  • MilanPI 1.0.0.HNot affected
AMD EPYC™ 7002 Series ProcessorsAMD
  • RomePI 1.0.0.NNot affected
AMD EPYC™ 7001 Series ProcessorsAMD
  • NaplesPI 1.0.0.RNot affected
AMD EPYC™ 9005 Series ProcessorsAMD
  • TurinPI 1.0.0.6Not affected
AMD Instinct™ MI300AAMD
  • MI300A 1.0.0.BNot affected
AMD EPYC™ 9V64H ProcessorAMD
  • MI300C 1.0.0.2Not affected
AMD Ryzen™ Threadripper™ PRO 3000WX ProcessorsAMD
  • ChagallWSPI-sWRX8 1.0.0.CNot affected
  • CastlePeakWSPI-sWRX8 1.0.0.INot affected
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsAMD
  • ChagallWSPI-sWRX8 1.0.0.CNot affected
AMD Ryzen™ Threadripper™ 7000 ProcessorsAMD
  • StormPeakPI-SP6_1.0.0.1lNot affected
  • ShimadaPeakPI-SP6_1.0.0.1Not affected
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsAMD
  • StormPeakPI-SP6_1.1.0.0jNot affected
  • ShimadaPeakPI-SP6_1.0.0.1Not affected
AMD Ryzen™ Threadripper™ 9000 ProcessorsAMD
  • ShimadaPeakPI-SP6_1.0.0.1Not affected
AMD Ryzen™ Threadripper™ PRO 9000 WX-Series ProcessorsAMD
  • ShimadaPeakPI-SP6_1.0.0.1Not affected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD
  • EmbMilanPI-SP3 v9 1.0.0.CNot affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")AMD
  • EmbGenoaPI-SP5 1.0.0.BNot affected
AMD EPYC™ Embedded 7002 Series ProcessorsAMD
  • EmbRomePI-SP3 1.0.0.FNot affected
AMD EPYC™ Embedded 3000 Series ProcessorsAMD
  • SnowyOwl_SP4_SP4r2.1.1.0.HNot affected
AMD EPYC™ Embedded 9005 Series ProcessorsAMD
  • EmbTurinPI-SP5_1.0.0.1Not affected
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")AMD
  • EmbGenoaPI-SP5 1.0.0.BNot affected
AMD EPYC™ Embedded 8004 Series ProcessorsAMD
  • EmbGenoaPI-SP5 1.0.0.BNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.