5.4
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Изисква физически достъп, при специфични условия, само при определена конфигурация или състояние на системата, с администраторски права и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.
Засегнати продукти
- AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: PhoenixPI-FP8-FP7_1.2.0.0f
- AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics: DragonRangeFL1PI 1.0.0.3k
- AMD AMD Ryzen™ 7000 Series Desktop Processors: ComboAM5PI 1.0.0.d
- AMD AMD Ryzen™ 9000HX Series Processors: FireRangeFL1PI 1.0.0.0d
- AMD AMD Ryzen™ AI 300 Series Processors: StrixKrackanPI-FP8_1.1.0.0e
- AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors: StormPeakPI-SP6 1.0.0.1m; StormPeakPI-SP6_1.1.0.0k
- AMD AMD Ryzen™ 7000 Series Desktop Processors: ComboAM5PI 1.1.0.3f
- AMD AMD Ryzen™ 7000 Series Desktop Processors: ComboAM5PI_1.2.0.3i
- AMD AMD Ryzen™ 8000 Series Desktop Processors: ComboAM5PI 1.1.0.3f
- AMD AMD Ryzen™ 8000 Series Desktop Processors: ComboAM5PI_1.2.0.3i
- AMD AMD Ryzen™ 9000 Series Desktop Processors: ComboAM5PI_1.2.0.3i
- AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics: PhoenixPI-FP8-FP7_1.2.0.0f
- AMD AMD Ryzen™ AI Max 300 Series Processors: StrixHaloPI-FP11_1.0.0.2a
- AMD AMD Ryzen™ Z1 Series Processors: PhoenixPI-FP8-FP7_1.2.0.0f
- AMD AMD Ryzen™ Z1 Series Processors: PhoenixPI-FP8-FP7_1.2.0.0f
- AMD AMD Ryzen™ Z2 Series Processors Extreme: StrixKrackanPI-FP8_1.1.0.2d
- AMD AMD Ryzen™ Z2 Series Processors: PhoenixPI-FP8-FP7_1.2.0.0f
- AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors: ShimadaPeakPI-SP6 1.0.0.1c
- AMD AMD Ryzen™ Threadripper™ 7000 Processors: ShimadaPeakPI-SP6 1.0.0.1c
- AMD AMD Ryzen™ Threadripper™ 9000 Processors: ShimadaPeakPI-SP6 1.0.0.1c
- AMD AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors: ShimadaPeakPI-SP6 1.0.0.1c
- AMD AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael"): ComboAM5PI_1.3.0.0
- AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): ComboAM5PI_1.3.0.0
- AMD AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge"): ComboAM5PI_1.3.0.0
- AMD AMD Ryzen™ Embedded 9000 Series Processors: EmbeddedAM5PI 1.0.0.5
- AMD AMD Ryzen™ Embedded 8000 Series Processors: EmbeddedPhoenixPI-FP7r2_1.0.0.4
- AMD AMD Ryzen™ Embedded 7000 Series Processors: EmbeddedAM5PI 1.0.0.5
- AMD AMD EPYC™ 4004 Series Processors: ComboAM5PI 1.0.0.d / ComboAM5PI 1.1.0.3f / ComboAM5PI_1.2.0.3i
- AMD AMD EPYC™ 4005 Series Processors: ComboAM5PI_1.2.0.3i
Вид слабост
История
- 15 май 2026 Публикувано