AMD vulnerabilities

Published CVEs affecting AMD products: 139 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2024-36343 Medium · 4.6 CWE-124 May 19, 2026

Improper input validation in the System Management Mode (SMM) communications buffer…

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.

CVE-2026-0481 Critical · 9.2 CWE-1327 May 15, 2026

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem)…

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

CVE-2025-54518 High · 7.0 CWE-1189 May 15, 2026

Improper isolation of shared resources within the CPU operation cache on Zen 2-based…

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

CVE-2025-52532 Low · 2.0 CWE-367 May 15, 2026

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent...

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

CVE-2024-36334 High · 7.0 CWE-347 May 15, 2026

Improper Verification of Cryptographic Signature in AMD AMD Radeon™ RX 7000 Series Graphics Products

Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.

CVE-2024-36333 High · 7.8 CWE-427 May 15, 2026

Uncontrolled Search Path Element in AMD Radeon Software

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CVE-2024-36323 High · 8.8 CWE-284 May 15, 2026

Improper Access Control in AMD AMD Radeon™ RX 7000 Series Graphics Products

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

CVE-2024-21950 Low · 1.8 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Instinct™ MI300X

An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

CVE-2026-0428 Low · 1.8 CWE-1284 May 15, 2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a…

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

CVE-2026-0427 Medium · 4.6 CWE-459 May 15, 2026

Improper cleanup of shared register resources in GPU firmware could allow an…

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.

CVE-2025-66664 Medium · 4.6 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Radeon™ RX 6000 Series Graphics Products

Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception

CVE-2025-66660 Low · 1.8 CWE-1284 May 15, 2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a…

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.

CVE-2025-54517 High · 8.5 CWE-787 May 15, 2026

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

CVE-2025-54511 Medium · 5.3 CWE-274 May 15, 2026

Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an...

Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.

CVE-2025-48516 Medium · 6.9 CWE-276 May 15, 2026

Incorrect Default Permissions in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module.

CVE-2025-48513 Medium · 6.9 CWE-908 May 15, 2026

Use of Uninitialized Resource in AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")

Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality or availability.

CVE-2025-29944 Medium · 6.8 CWE-120 May 15, 2026

Classic Buffer Overflow in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")

A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash

CVE-2025-29938 High · 7.1 CWE-252 May 15, 2026

Unchecked Return Value in AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.

CVE-2025-29937 Medium · 5.8 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")

An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality.

CVE-2025-29936 High · 8.4 CWE-20 May 15, 2026

Improper Input Validation in AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.

CVE-2025-29935 High · 8.4 CWE-787 May 15, 2026

Out-of-bounds Write in AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")

An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability.

CVE-2025-0044 Medium · 4.8 CWE-125 May 15, 2026

Out-of-bounds Read in AMD AMD Ryzen™ Al Max+

An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.

CVE-2025-0040 Medium · 5.3 CWE-284 May 15, 2026

Improper Access Control in AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.

CVE-2025-0028 High · 8.3 CWE-252 May 15, 2026

Unchecked Return Value in AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability.

CVE-2024-36332 Medium · 6.8 CWE-1189 May 15, 2026

Improper isolation of GPU HW register space could allow a privileged attacker in…

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.