Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PCIe driver’s S-EL0 address space
Published Dec 16, 2025
9.8
CRITICALCVSS 3.1
EPSS 0.36%
Description
Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driver that could result in an out-of-bounds write within PCIe driver’s S-EL0 address space.
Affected products
No data.
Configuration 1
- < 5.4.5.1
Running on/with
- n/a
Configuration 2
- < 5.4.5.1
Running on/with
- n/a
Configuration 3
- < 5.4.5.1
Running on/with
- n/a
Configuration 4
- < 5.4.5.1
Running on/with
- n/a
Configuration 5
- < 5.4.5.1
Running on/with
- n/a
Configuration 6
- < 5.4.5.1
Running on/with
- n/a
Configuration 7
- < 4.4.5.2
Running on/with
- n/a
Configuration 8
- < 4.4.5.2
Running on/with
- n/a
Configuration 9
- < 4.4.5.2
Running on/with
- n/a
Configuration 10
- < 4.4.5.2
Running on/with
- n/a
Configuration 11
- < 4.4.5.2
Running on/with
- n/a
Configuration 12
- < 4.4.5.2
Running on/with
- n/a
Configuration 13
- < 3.5.9.3
Running on/with
- n/a
Configuration 14
- < 3.5.9.3
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- https://amperecomputing.com/products/product-security Vendor Advisory
- https://amperecomputing.com/products/security-bulletins/amp-sb-0007 Vendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-203818 Advisory
| Link | Providers | Tags |
|---|---|---|
| https://amperecomputing.com/products/product-security | Vendor Advisory | |
| https://amperecomputing.com/products/security-bulletins/amp-sb-0007 | Vendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-203818 | Advisory |
Change history (0)
No recorded changes yet.