Vulnerability Intelligence Report
CVE-2025-29950
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
No Active Exploit Signals
CVSS Base Score
7.1
HIGH
EPSS Probability:0.14%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-1274 ↗CWE-1274 Improper Access Control for Volatile Memory Containing Boot Code
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | AMD EPYC™ 9004 Series Processors | GenoaPI 1.0.0.G (unaffected) |
| AMD | AMD EPYC™ 7003 Series Processors | MilanPI 1.0.0.H (unaffected) |
| AMD | AMD EPYC™ 7002 Series Processors | RomePI 1.0.0.N (unaffected) |
| AMD | AMD EPYC™ 7001 Series Processors | NaplesPI 1.0.0.R (unaffected) |
| AMD | AMD EPYC™ 9005 Series Processors | TurinPI 1.0.0.6 (unaffected) |
| AMD | AMD Instinct™ MI300A | MI300A 1.0.0.B (unaffected) |
| AMD | AMD EPYC™ 9V64H Processor | MI300C 1.0.0.2 (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ PRO 3000WX Processors | ChagallWSPI-sWRX8 1.0.0.C (unaffected), CastlePeakWSPI-sWRX8 1.0.0.I (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors | ChagallWSPI-sWRX8 1.0.0.C (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ 7000 Processors | StormPeakPI-SP6_1.0.0.1l (unaffected), ShimadaPeakPI-SP6_1.0.0.1 (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | StormPeakPI-SP6_1.1.0.0j (unaffected), ShimadaPeakPI-SP6_1.0.0.1 (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ 9000 Processors | ShimadaPeakPI-SP6_1.0.0.1 (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors | ShimadaPeakPI-SP6_1.0.0.1 (unaffected) |
| AMD | AMD EPYC™ Embedded 7003 Series Processors | EmbMilanPI-SP3 v9 1.0.0.C (unaffected) |
| AMD | AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") | EmbGenoaPI-SP5 1.0.0.B (unaffected) |
| AMD | AMD EPYC™ Embedded 7002 Series Processors | EmbRomePI-SP3 1.0.0.F (unaffected) |
| AMD | AMD EPYC™ Embedded 3000 Series Processors | SnowyOwl_SP4_SP4r2.1.1.0.H (unaffected) |
| AMD | AMD EPYC™ Embedded 9005 Series Processors | EmbTurinPI-SP5_1.0.0.1 (unaffected) |
| AMD | AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") | EmbGenoaPI-SP5 1.0.0.B (unaffected) |
| AMD | AMD EPYC™ Embedded 8004 Series Processors | EmbGenoaPI-SP5 1.0.0.B (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.145%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2025-03-12T15:15:04 |
| Published | 2026-02-10T19:10:28 |
| Patch Date | 2026-02-10 |
| Last Updated | 2026-02-26T14:44:29 |
Community Chatter & Buzz