Description
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
Scores
CVSS v3
7.5
EPSS
0.0001
EPSS Percentile
2.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-1220
Status
published
Products (28)
AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
ComboAM4 1.0.0.B
AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Picasso-FP5 1.0.1.1
AMD/AMD Ryzen™ 3000 Series Desktop Processors
ComboAM4 1.0.0.B
AMD/AMD Ryzen™ 3000 Series Desktop Processors
ComboAM4v2PI_1.2.0.CA
AMD/AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
Picasso-FP5 1.0.1.1
AMD/AMD Ryzen™ 4000 Series Desktop Processors
ComboAM4v2PI_1.2.0.CA
AMD/AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Renoir-FP6 1.0.0.D
AMD/AMD Ryzen™ 5000 Series Desktop Processors
ComboAM4v2PI_1.2.0.CA
AMD/AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
ComboAM4v2PI_1.2.0.CA
AMD/AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
CezannePI-FP6_1.0.1.0
... and 18 more
Published
Sep 06, 2025
Tracked Since
Feb 18, 2026