Known vulnerabilities in 3rd Gen AMD EPYC Processors

Vendor: AMD
Software: 3rd Gen AMD EPYC Processors
Software CPE: cpe:2.3:h:amd:3rd_gen_amd_epyc_processors:*:*:*:*:*:*:*:*
Website: https://www.amd.com/en
Total vulnerabilities: 61
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting 3rd Gen AMD EPYC Processors 3rd Gen AMD EPYC Processors is affected by 61 known vulnerabilities: 3 medium, 58 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112557 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36349		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112556 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36348		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357		 CWE-1342 Low
No
No
 MilanPI 1.0.0.G 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350		 CWE-1342 Low
No
No
 MilanPI 1.0.0.G 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU103603 - Improper Verification of Cryptographic Signature
CVE-2024-56161		 CWE-347 Low
No
No
 MilanPI 1.0.0.F 04.02.2025 SB2025020458
SB2025032168
SB2025052059
and 3 more
#VU97953 - Out-of-bounds write
CVE-2021-46772		 CWE-787 Low
No
No
 GenoaPI 1.0.0.9 02.10.2024 SB2024100225
SB2024101744
SB20241022397
#VU97952 - Improper Access Control
CVE-2021-26387		 CWE-284 Low
No
No
 - 02.10.2024 SB2024100223
SB2024101744
SB20241022397
#VU97951 - Incomplete cleanup
CVE-2023-31356		 CWE-459 Low
No
No
 MilanPI 1.0.0.C 02.10.2024 SB2024100225
SB2024100226
SB2024100227
and 19 more
#VU97949 - Stack-based buffer overflow
CVE-2021-46746		 CWE-121 Low
No
No
 - 02.10.2024 SB2024100221
SB2024101744
SB20241022397
#VU97948 - Improper input validation
CVE-2023-20584		 CWE-20 Low
No
No
 MilanPI 1.0.0.C 02.10.2024 SB2024100225
SB2024100226
SB2024100227
and 18 more
#VU97947 - Key Management Errors
CVE-2024-21981		 CWE-320 Low
No
No
 - 02.10.2024 SB2024100220
#VU97945 - Improper Initialization
CVE-2023-20591		 CWE-665 Medium
No
No
 MilanPI 1.0.0.B 02.10.2024 SB2024100225
SB2024101744
SB20241022397
#VU97944 - Out-of-bounds write
CVE-2021-26344		 CWE-787 Low
No
No
 MilanPI 1.0.0.5 02.10.2024 SB2024100225
SB2024101744
SB20241022397
#VU97943 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-20578		 CWE-367 Low
No
No
 MilanPI 1.0.0.C 02.10.2024 SB2024100225
SB2024101744
SB20241022397
#VU96619 - Permissions, Privileges, and Access Controls
CVE-2023-31315		 CWE-264 Low
No
No
 MilanPI 1.0.0.D 29.08.2024 SB2024082927
SB2024082928
SB2024082929
and 23 more
#VU94742 - Permissions, Privileges, and Access Controls
CVE-2023-31347		 CWE-264 Low
No
No
 - 25.07.2024 SB2024072522
SB2024082109
#VU94741 - Improper Initialization
CVE-2023-31346		 CWE-665 Low
No
No
 - 25.07.2024 SB2024072522
SB2024072524
SB2024072525
and 10 more
#VU84028 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2023-20592		 CWE-758 Low
No
No
 MilanPI 1.0.0.C 08.12.2023 SB2023120815
SB2023120817
SB2023120818
and 24 more
#VU84021 - Improper input validation
CVE-2023-20566		 CWE-20 Low
No
No
 MilanPI 1.0.0.B 08.12.2023 SB2023120814
SB2023120817
SB2023120818
and 8 more
#VU84020 - Out-of-bounds write
CVE-2023-20533		 CWE-787 Low
No
No
 MilanPI 1.0.0.5 08.12.2023 SB2023120814
SB2023120817
SB2023120818
and 8 more


Showing elements 1 - 20 out of 61