Vulnerabilidades de AMD
CVEs publicadas que afetam produtos de AMD: 139 registro(s), com severidade, exploração e correções.
AMD Ryzen™ Embedded 8000 Series Processors 31AMD EPYC™ 9005 Series Processors 26AMD EPYC™ Embedded 9005 Series Processors 24AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 24AMD Ryzen™ 8000 Series Desktop Processors 24AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 22AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 21AMD EPYC™ 9004 Series Processors 20AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 20AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 20AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 20AMD Ryzen™ 3000 Series Desktop Processors 20AMD Ryzen™ 4000 Series Desktop Processors 19AMD Ryzen™ Embedded 7000 Series Processors 19AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 19AMD Ryzen™ 7000 Series Desktop Processors 19AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 19AMD EPYC™ Embedded 8004 Series Processors 18AMD Ryzen™ Embedded V2000 Series Processors 18AMD Ryzen™ AI 300 Series Processors 18AMD Ryzen™ 5000 Series Desktop Processors 18AMD EPYC™ 8004 Series Processors 17AMD Ryzen™ 9000 Series Desktop Processors 17AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 17AMD Radeon™ RX 6000 Series Graphics Products 16AMD Radeon™ PRO W6000 Series Graphics Products 16AMD Radeon™ RX 7000 Series Graphics Products 16AMD Ryzen™ Embedded R1000 Series Processors 16AMD Ryzen™ Embedded R2000 Series Processors 16AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors 16AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors 16AMD EPYC™ 7003 Series Processors 15AMD Radeon™ PRO W7000 Series Graphics Products 15AMD Radeon™ PRO V620 15AMD Instinct™ MI210 15AMD Instinct™ MI300A 15AMD EPYC™ Embedded 7003 Series Processors 14AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 14AMD Ryzen™ Embedded V3000 Series Processors 14AMD Instinct™ MI250 14
CVE-2025-0007
Média · 5.7
CWE-710 24/11/2025
Insufficient validation within Xilinx Run Time framework could allow a local attacker to…
Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.
CVE-2025-0003
Alta · 7.3
CWE-413 24/11/2025
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger…
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability
CVE-2025-52539
Alta · 7.3
CWE-121 24/11/2025
Stack-based Buffer Overflow em AMD Xilinx Run Time (XRT)
A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability.
CVE-2025-0005
Alta · 7.3
CWE-190 24/11/2025
Integer Overflow or Wraparound em AMD Xilinx Run Time (XRT)
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service.
CVE-2025-54515
Baixa · 1.0
CWE-1284 23/11/2025
The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A…
The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interface (PSCI) commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were from processors in the secure state instead of the non-secure state.
CVE-2025-48507
Alta · 8.6
CWE-1284 23/11/2025
The security state of the calling processor into Trusted Firmware (TF-A) is not used and…
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.
CVE-2024-21923
Alta · 7.3
CWE-426 23/11/2025
Untrusted Search Path em AMD AMD StoreMI™
Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVE-2024-21922
Alta · 7.3
CWE-426 23/11/2025
Untrusted Search Path em AMD AMD StoreMI™
A DLL hijacking vulnerability in AMD StoreMI™ could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2025-62626
Alta · 7.2
CWE-333 21/11/2025
Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker…
Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.
CVE-2025-48502
Média · 5.5
CWE-1285 21/11/2025
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR…
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
CVE-2025-29934
Média · 5.3
CWE-459 21/11/2025
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a…
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity.
CVE-2025-0033
Média · 6.0
CWE-284 14/10/2025
Improper Access Control em AMD AMD EPYC™ 7003 Series Processors (formerly codenamed "Milan")
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity.
CVE-2023-20593
Média · 5.5
CWE-209 24/07/2023
Information Exposure Through an Error Message em Xen
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
CVE-2021-39298
Alta · 8.8
CWE-269 16/02/2022
Improper Privilege Management em Hp Z1 Entry Tower G5 Workstation Firmware
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.