AMD vulnerabilities

Published CVEs affecting AMD products: 126 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-43598 High · 7.7 CWE-822 Oct 6, 2026

Untrusted Pointer Dereference in AMD AMD Instinct™ MI210

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.

CVE-2026-0482 Medium · 5.4 CWE-787 Oct 5, 2026

Out-of-bounds Write in AMD Alveo™ Accelerator Cards

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

CVE-2026-0461 High · 7.5 CWE-787 Oct 5, 2026

Out-of-bounds Write in AMD Zynq™ UltraScale+™ MPSoCs

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.

CVE-2023-20572 Medium · 5.6 CWE-208 Jun 26, 2026

An observable timing discrepancy in the ASP could allow a privileged attacker to perform…

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

CVE-2023-20540 Low · 1.8 CWE-208 Jun 26, 2026

An observable timing discrepancy in the ASP could allow a privileged attacker to perform…

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.

CVE-2026-40677 High · 7.7 Jun 12, 2026

The use of insecure HTTP transport within AMD optional tools could allow an attacker to…

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.

CVE-2024-21944 Medium · 5.3 CWE-20 Jun 10, 2026

Improper Input Validation in AMD AMD EPYC™ 7003 Series Processors

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

CVE-2026-28237 Medium · 5.5 CWE-770 Jun 9, 2026

Allocation of Resources Without Limits or Throttling in AMD Uprof

Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.

CVE-2026-0466 Medium · 5.5 CWE-497 Jun 9, 2026

Improper access control in AMD uProf may allow a local attacker with user privileges to…

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.

CVE-2025-54509 Medium · 4.0 CWE-1262 Jun 9, 2026

Improper access control for register interface in the Input-Output Memory Management…

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.

CVE-2021-46747 High · 7.1 CWE-1220 Jun 1, 2026

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an…

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.

CVE-2026-49121 Critical · 9.8 CWE-502 Jun 1, 2026

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticated remote attackers to execute arbitrary code by sending a malicious pickle payload to a ZMQ SUB socket with no authentication, HMAC, or format validation. Attackers who can reach the writer XPUB endpoint on the cluster network or supply a forged Handle with an attacker-controlled remote_subscribe_addr can deliver a crafted pickle payload that executes arbitrary code simultaneously as the inference worker process on every remote reader worker.

CVE-2024-36343 Medium · 4.6 CWE-124 May 19, 2026

Improper input validation in the System Management Mode (SMM) communications buffer…

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.

CVE-2026-0481 Critical · 9.2 CWE-1327 May 15, 2026

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem)…

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

CVE-2025-54518 High · 7.0 CWE-1189 May 15, 2026

Improper isolation of shared resources within the CPU operation cache on Zen 2-based…

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

CVE-2025-52532 Low · 2.0 CWE-367 May 15, 2026

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent...

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

CVE-2024-36334 High · 7.0 CWE-347 May 15, 2026

Improper Verification of Cryptographic Signature in AMD AMD Radeon™ RX 7000 Series Graphics Products

Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.

CVE-2024-36333 High · 7.8 CWE-427 May 15, 2026

Uncontrolled Search Path Element in AMD Radeon Software

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CVE-2024-36323 High · 8.8 CWE-284 May 15, 2026

Improper Access Control in AMD AMD Radeon™ RX 7000 Series Graphics Products

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

CVE-2024-21950 Low · 1.8 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Instinct™ MI300X

An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

CVE-2026-0428 Low · 1.8 CWE-1284 May 15, 2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a…

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

CVE-2026-0427 Medium · 4.6 CWE-459 May 15, 2026

Improper cleanup of shared register resources in GPU firmware could allow an…

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.

CVE-2025-66664 Medium · 4.6 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Radeon™ RX 6000 Series Graphics Products

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

CVE-2025-66660 Low · 1.8 CWE-1284 May 15, 2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a…

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.

CVE-2025-54517 High · 8.5 CWE-787 May 15, 2026

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.