CVE-2025-29950

Published: Feb 10, 2026

Modified: Feb 26, 2026

PUBLISHED

Description

Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

Vendor	Product	Versions
AMD	AMD EPYC™ 9004 Series Processors	unaffected `GenoaPI 1.0.0.G`
AMD	AMD EPYC™ 7003 Series Processors	unaffected `MilanPI 1.0.0.H`
AMD	AMD EPYC™ 7002 Series Processors	unaffected `RomePI 1.0.0.N`
AMD	AMD EPYC™ 7001 Series Processors	unaffected `NaplesPI 1.0.0.R`
AMD	AMD EPYC™ 9005 Series Processors	unaffected `TurinPI 1.0.0.6`
AMD	AMD Instinct™ MI300A	unaffected `MI300A 1.0.0.B`
AMD	AMD EPYC™ 9V64H Processor	unaffected `MI300C 1.0.0.2`
AMD	AMD Ryzen™ Threadripper™ PRO 3000WX Processors	unaffected `ChagallWSPI-sWRX8 1.0.0.C` unaffected `CastlePeakWSPI-sWRX8 1.0.0.I`
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	unaffected `ChagallWSPI-sWRX8 1.0.0.C`
AMD	AMD Ryzen™ Threadripper™ 7000 Processors	unaffected `StormPeakPI-SP6_1.0.0.1l` unaffected `ShimadaPeakPI-SP6_1.0.0.1`
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	unaffected `StormPeakPI-SP6_1.1.0.0j` unaffected `ShimadaPeakPI-SP6_1.0.0.1`
AMD	AMD Ryzen™ Threadripper™ 9000 Processors	unaffected `ShimadaPeakPI-SP6_1.0.0.1`
AMD	AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors	unaffected `ShimadaPeakPI-SP6_1.0.0.1`
AMD	AMD EPYC™ Embedded 7003 Series Processors	unaffected `EmbMilanPI-SP3 v9 1.0.0.C`
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")	unaffected `EmbGenoaPI-SP5 1.0.0.B`
AMD	AMD EPYC™ Embedded 7002 Series Processors	unaffected `EmbRomePI-SP3 1.0.0.F`
AMD	AMD EPYC™ Embedded 3000 Series Processors	unaffected `SnowyOwl_SP4_SP4r2.1.1.0.H`
AMD	AMD EPYC™ Embedded 9005 Series Processors	unaffected `EmbTurinPI-SP5_1.0.0.1`
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")	unaffected `EmbGenoaPI-SP5 1.0.0.B`
AMD	AMD EPYC™ Embedded 8004 Series Processors	unaffected `EmbGenoaPI-SP5 1.0.0.B`

Weaknesses (CWE)

CWE-1274

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-29950

Description

Affected Products

Weaknesses (CWE)

References