VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2026/0xxx/CVE-2026-0438.json
T

456 lines
18 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-0438",
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"state": "PUBLISHED",
"assignerShortName": "AMD",
"dateReserved": "2025-12-06T13:53:51.228Z",
"datePublished": "2026-05-15T01:41:25.568Z",
"dateUpdated": "2026-05-19T21:01:36.151Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
"shortName": "AMD",
"dateUpdated": "2026-05-19T21:01:36.151Z"
},
"datePublic": "2026-05-19T20:59:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-1072",
"description": "CWE-1072 Call to Function Pointer from Untrusted Control Sphere in SMM",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics",
"versions": [
{
"status": "unaffected",
"version": "PhoenixPI-FP8-FP7_1.2.0.0f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics",
"versions": [
{
"status": "unaffected",
"version": "DragonRangeFL1PI 1.0.0.3k"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI 1.0.0.d"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 9000HX Series Processors",
"versions": [
{
"status": "unaffected",
"version": "FireRangeFL1PI 1.0.0.0d"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ AI 300 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "StrixKrackanPI-FP8_1.1.0.0e"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors",
"versions": [
{
"status": "unaffected",
"version": "StormPeakPI-SP6 1.0.0.1m"
},
{
"status": "unaffected",
"version": "StormPeakPI-SP6_1.1.0.0k"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI 1.1.0.3f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.2.0.3i"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8000 Series Desktop Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI 1.1.0.3f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8000 Series Desktop Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.2.0.3i"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 9000 Series Desktop Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.2.0.3i"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics",
"versions": [
{
"status": "unaffected",
"version": "PhoenixPI-FP8-FP7_1.2.0.0f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ AI Max 300 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "StrixHaloPI-FP11_1.0.0.2a"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Z1 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "PhoenixPI-FP8-FP7_1.2.0.0f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Z1 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "PhoenixPI-FP8-FP7_1.2.0.0f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Z2 Series Processors Extreme",
"versions": [
{
"status": "unaffected",
"version": "StrixKrackanPI-FP8_1.1.0.2d"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Z2 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "PhoenixPI-FP8-FP7_1.2.0.0f"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors",
"versions": [
{
"status": "unaffected",
"version": "ShimadaPeakPI-SP6 1.0.0.1c"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ 7000 Processors",
"versions": [
{
"status": "unaffected",
"version": "ShimadaPeakPI-SP6 1.0.0.1c"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ 9000 Processors",
"versions": [
{
"status": "unaffected",
"version": "ShimadaPeakPI-SP6 1.0.0.1c"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors",
"versions": [
{
"status": "unaffected",
"version": "ShimadaPeakPI-SP6 1.0.0.1c"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed \"Raphael\")",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.3.0.0"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed \"Phoenix\")",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.3.0.0"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed \"Granite Ridge\")",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.3.0.0"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded 9000 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "EmbeddedAM5PI 1.0.0.5"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded 8000 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "EmbeddedPhoenixPI-FP7r2_1.0.0.4"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded 7000 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "EmbeddedAM5PI 1.0.0.5"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD EPYC™ 4004 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI 1.0.0.d / ComboAM5PI 1.1.0.3f / ComboAM5PI_1.2.0.3i"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD EPYC™ 4005 Series Processors",
"versions": [
{
"status": "unaffected",
"version": "ComboAM5PI_1.2.0.3i"
}
],
"defaultStatus": "affected"
}
],
"descriptions": [
{
"lang": "en",
"value": "A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.<br>"
}
]
}
],
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html"
},
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "PHYSICAL",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "MEDIUM",
"baseScore": 5.4,
"vectorString": "CVSS:4.0/AV:P/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "AMD PSIRT Automation 1.0"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-05-15T13:17:40.357741Z",
"id": "CVE-2026-0438",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-05-15T13:29:51.481Z"
}
}
]
}
}
View Git Blame Copy Permalink