AMD Epyc 4004 vulnerabilities

2 CVEs affecting AMD Epyc 4004, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36343, published 2026-05-19.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-36343, published 2026-05-19. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of…
• CVE-2024-36345, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of…