CVE-2025-29950

No fix known EPSS <1%CVSS 7.1

Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

Published 2026-02-10 · CVE record · OSV

Products: AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7001 Series Processors, AMD EPYC™ 9005 Series Processors, AMD Instinct™ MI300A, AMD EPYC™ 9V64H Processor, AMD Ryzen™ Threadripper™ PRO 3000WX Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ Threadripper™ 7000 Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ Threadripper™ 9000 Processors, AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 3000 Series Processors, AMD EPYC™ Embedded 9005 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"), AMD EPYC™ Embedded 8004 Series Processors