Description
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
References (2)
Core 2
Core References
Scores
CVSS v4
7.1
EPSS
0.0001
EPSS Percentile
0.4%
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-1274
Status
published
Products (23)
AMD/AMD EPYC™ 7001 Series Processors
NaplesPI 1.0.0.R
AMD/AMD EPYC™ 7002 Series Processors
RomePI 1.0.0.N
AMD/AMD EPYC™ 7003 Series Processors
MilanPI 1.0.0.H
AMD/AMD EPYC™ 9004 Series Processors
GenoaPI 1.0.0.G
AMD/AMD EPYC™ 9005 Series Processors
TurinPI 1.0.0.6
AMD/AMD EPYC™ 9V64H Processor
MI300C 1.0.0.2
AMD/AMD EPYC™ Embedded 3000 Series Processors
SnowyOwl_SP4_SP4r2.1.1.0.H
AMD/AMD EPYC™ Embedded 7002 Series Processors
EmbRomePI-SP3 1.0.0.F
AMD/AMD EPYC™ Embedded 7003 Series Processors
EmbMilanPI-SP3 v9 1.0.0.C
AMD/AMD EPYC™ Embedded 8004 Series Processors
EmbGenoaPI-SP5 1.0.0.B
... and 13 more
Published
Feb 10, 2026
Tracked Since
Feb 18, 2026