CVE-2025-29950
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
Published:Feb 10, 2026
Last Modified:Apr 15, 2026
EPS:Feb 10, 2026
EPSS Score:0.00006
CVSS Score:7.1
Affected Products
Vendor
Product
Action
Vendor
Amd
Product
Epyc 7001 Series Processors
Amd
Epyc 7001 Series Processors
Vendor
Amd
Product
Epyc 7002 Series Processors
Amd
Epyc 7002 Series Processors
Vendor
Amd
Product
Epyc 7003 Series Processors
Amd
Epyc 7003 Series Processors
Vendor
Amd
Product
Epyc 9004 Series Processors
Amd
Epyc 9004 Series Processors
Vendor
Amd
Product
Epyc 9005 Series Processors
Amd
Epyc 9005 Series Processors
Vendor
Amd
Product
Epyc 9v64h Processor
Amd
Epyc 9v64h Processor
Vendor
Amd
Product
Epyc Embedded 3000 Series Processors
Amd
Epyc Embedded 3000 Series Processors
Vendor
Amd
Product
Epyc Embedded 7002 Series Processors
Amd
Epyc Embedded 7002 Series Processors
Vendor
Amd
Product
Epyc Embedded 7003 Series Processors
Amd
Epyc Embedded 7003 Series Processors
Vendor
Amd
Product
Epyc Embedded 8004 Series Processors
Amd
Epyc Embedded 8004 Series Processors
Vendor
Amd
Product
Epyc Embedded 9004 Series Processors
Amd
Epyc Embedded 9004 Series Processors
Vendor
Amd
Product
Epyc Embedded 9005 Series Processors
Amd
Epyc Embedded 9005 Series Processors
Vendor
Amd
Product
Instinct Mi300a
Amd
Instinct Mi300a
Vendor
Amd
Product
Ryzen Threadripper 7000 Processors
Amd
Ryzen Threadripper 7000 Processors
Vendor
Amd
Product
Ryzen Threadripper 9000 Processors
Amd
Ryzen Threadripper 9000 Processors
Vendor
Amd
Product
Ryzen Threadripper Pro 3000wx Processors
Amd
Ryzen Threadripper Pro 3000wx Processors
Vendor
Amd
Product
Ryzen Threadripper Pro 5000 Wx-series Processors
Amd
Ryzen Threadripper Pro 5000 Wx-series Processors
Vendor
Amd
Product
Ryzen Threadripper Pro 7000 Wx-series Processors
Amd
Ryzen Threadripper Pro 7000 Wx-series Processors
Vendor
Amd
Product
Ryzen Threadripper Pro 9000 Wx-series Processors
Amd
Ryzen Threadripper Pro 9000 Wx-series Processors
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
