CVE-2025-29950

Published Feb 10, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Description
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd epyc 7001 Series Processors
Amd epyc 7002 Series Processors
Amd epyc 7003 Series Processors
Amd epyc 9004 Series Processors
Amd epyc 9005 Series Processors
Amd epyc 9v64h Processor
Amd epyc Embedded 3000 Series Processors
Amd epyc Embedded 7002 Series Processors
Amd epyc Embedded 7003 Series Processors
Amd epyc Embedded 8004 Series Processors
Amd epyc Embedded 9004 Series Processors
Amd epyc Embedded 9005 Series Processors
Amd instinct Mi300a
Amd ryzen Threadripper 7000 Processors
Amd ryzen Threadripper 9000 Processors
Amd ryzen Threadripper Pro 3000wx Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Amd ryzen Threadripper Pro 7000 Wx-series Processors
Amd ryzen Threadripper Pro 9000 Wx-series Processors
Vendors & Products Amd
Amd epyc 7001 Series Processors
Amd epyc 7002 Series Processors
Amd epyc 7003 Series Processors
Amd epyc 9004 Series Processors
Amd epyc 9005 Series Processors
Amd epyc 9v64h Processor
Amd epyc Embedded 3000 Series Processors
Amd epyc Embedded 7002 Series Processors
Amd epyc Embedded 7003 Series Processors
Amd epyc Embedded 8004 Series Processors
Amd epyc Embedded 9004 Series Processors
Amd epyc Embedded 9005 Series Processors
Amd instinct Mi300a
Amd ryzen Threadripper 7000 Processors
Amd ryzen Threadripper 9000 Processors
Amd ryzen Threadripper Pro 3000wx Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Amd ryzen Threadripper Pro 7000 Wx-series Processors
Amd ryzen Threadripper Pro 9000 Wx-series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
Weaknesses CWE-1274
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}