Amperecomputing

9 CVEs across 32 Amperecomputing products. Browse Amperecomputing vulnerabilities, severities, and proof-of-concept exploits.

Amperecomputing products with known CVEs

ProductCVEs
Ampere Altra6
Ampere Altra Firmware6
Ampere Altra Max6
Ampere Altra Max Firmware6
Ampereone A128-34x3
Ampereone A128-34x Firmware3
Ampereone A144-24x3
Ampereone A144-24x Firmware3
Ampereone A144-26m3
Ampereone A144-26m Firmware3
Ampereone A144-27x3
Ampereone A144-27x Firmware3
Ampereone A144-33m3
Ampereone A144-33m Firmware3
Ampereone A160-28m3
Ampereone A160-28m Firmware3
Ampereone A160-28x3
Ampereone A160-28x Firmware3
Ampereone A192-26m3
Ampereone A192-26m Firmware3
Ampereone A192-26x3
Ampereone A192-26x Firmware3
Ampereone A192-32m3
Ampereone A192-32m Firmware3
Ampereone A192-32x3
Ampereone A192-32x Firmware3
Ampereone A96-36m3
Ampereone A96-36m Firmware3
Ampereone A96-36x3
Ampereone A96-36x Firmware3
Ampereone1
Ampereone Firmware1
Amperecomputing CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-62864Critical9.82025-12-16Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal…
CVE-2025-62863Critical9.82025-12-16Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal…
CVE-2025-62862Medium4.62025-12-16Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal…
CVE-2022-46892Critical9.82023-02-15In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.
CVE-2022-35888Medium6.52022-09-29Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret informatio…
CVE-2022-37459High7.82022-08-17Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hij…
CVE-2021-45454High7.52022-08-17Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon.
CVE-2022-32295Critical9.82022-07-01On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor compon…
CVE-2022-25368Medium4.72022-03-10Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the…