CVE-2025-29950
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary…
- Published
- Updated
- Reserved
- Assigned by
- AMD
Description
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| AMDCNA (assigner) | 4.0 | High7.1 | CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| NVDNVD · Deferred | 4.0 | High7.1 | CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.16% · top 94% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Weakness
Affected products
AMD · AMD EPYC™ 9004 Series Processors
- unaffected GenoaPI 1.0.0.G
AMD · AMD EPYC™ 7003 Series Processors
- unaffected MilanPI 1.0.0.H
AMD · AMD EPYC™ 7002 Series Processors
- unaffected RomePI 1.0.0.N
AMD · AMD EPYC™ 7001 Series Processors
- unaffected NaplesPI 1.0.0.R
AMD · AMD EPYC™ 9005 Series Processors
- unaffected TurinPI 1.0.0.6
- unaffected MI300A 1.0.0.B
AMD · AMD EPYC™ 9V64H Processor
- unaffected MI300C 1.0.0.2
AMD · AMD Ryzen™ Threadripper™ PRO 3000WX Processors
- unaffected ChagallWSPI-sWRX8 1.0.0.C
- unaffected CastlePeakWSPI-sWRX8 1.0.0.I
AMD · AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- unaffected ChagallWSPI-sWRX8 1.0.0.C
AMD · AMD Ryzen™ Threadripper™ 7000 Processors
- unaffected StormPeakPI-SP6_1.0.0.1l
- unaffected ShimadaPeakPI-SP6_1.0.0.1
AMD · AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
- unaffected StormPeakPI-SP6_1.1.0.0j
- unaffected ShimadaPeakPI-SP6_1.0.0.1
AMD · AMD Ryzen™ Threadripper™ 9000 Processors
- unaffected ShimadaPeakPI-SP6_1.0.0.1
AMD · AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors
- unaffected ShimadaPeakPI-SP6_1.0.0.1
AMD · AMD EPYC™ Embedded 7003 Series Processors
- unaffected EmbMilanPI-SP3 v9 1.0.0.C
AMD · AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
- unaffected EmbGenoaPI-SP5 1.0.0.B
AMD · AMD EPYC™ Embedded 7002 Series Processors
- unaffected EmbRomePI-SP3 1.0.0.F
AMD · AMD EPYC™ Embedded 3000 Series Processors
- unaffected SnowyOwl_SP4_SP4r2.1.1.0.H
AMD · AMD EPYC™ Embedded 9005 Series Processors
- unaffected EmbTurinPI-SP5_1.0.0.1
AMD · AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")
- unaffected EmbGenoaPI-SP5 1.0.0.B
AMD · AMD EPYC™ Embedded 8004 Series Processors
- unaffected EmbGenoaPI-SP5 1.0.0.B
References (2)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2025-29950)Record last updated .