Browse CVEs

CRITICAL 9.8 CVE-2025-62863 Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly form… Ampereone A192 32m Firmware 4.4.5.2 / 5.4.5.1+ Fix from $2,3002025-12-16 CRITICAL 9.8 CVE-2025-62864 Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly form… Ampereone A192 32m Firmware 4.4.5.2 / 5.4.5.1+ Fix from $2,3002025-12-16 CRITICAL 9.8 CVE-2022-46892 In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex. Ampere Altra Firmware 2.10c+ Fix from $2,3002023-02-15 MEDIUM 6.5 CVE-2022-35888 Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret … Ampere Altra Max Firmware after 2022-07-15 Fix from $1,6002022-09-29 HIGH 7.8 CVE-2022-37459 Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and poten… Ampere Altra Firmware 1.08g / 2.05a+ Fix from $1,9502022-08-17 HIGH 7.5 CVE-2021-45454 Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon. Ampere Altra Firmware 1.08b / 2.05+ Fix from $1,9502022-08-17 CRITICAL 9.8 CVE-2022-32295 On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervi… Ampere Altra Firmware 1.09+ Fix from $2,3002022-07-01