AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix") vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting AMD AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix"): 6 record(s), with affected versions and fixes.
CVE-2026-0438
Medium · 5.4
CWE-1072 May 14, 2026
A System Management Mode (SMM) handler could perform a callout to code located in…
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.
CVE-2025-48521
Medium · 6.9
CWE-416 May 14, 2026
Use After Free in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.
CVE-2025-48512
High · 7.0
CWE-276 May 14, 2026
Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
CVE-2024-36315
Medium · 5.7
CWE-693 May 13, 2026
Improper enforcement of the LFENCE serialization property may allow an attacker to…
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
CVE-2025-54502
High · 7.5
CWE-668 Apr 16, 2026
Exposure of Resource to Wrong Sphere in AMD AMD EPYC™ 9004 Series Processors
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
CVE-2025-48503
High · 7.8
CWE-427 Feb 11, 2026
Uncontrolled Search Path Element in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.