Skip to content
Amd vulnerabilities
Products
Show 160 moreShow less
Newest
-
amd instinct™ mi210, instinct™ mi250, instinct™ mi250x +6 more +8 more
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a...
CVE-2026-43598
7.7 High
-
amd kria soms, zynq™ ultrascale+ mpsocs, zynq™ ultrascale+ rfsocs +2 more
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+...
CVE-2026-0461
7.5 High
-
amd alveo™ accelerator cards, versal premium series gen 2 adaptive socs (2vp3402, 2vp3502, 2vp3602), versal™ ai core series adaptive socs +5 more +7 more
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled...
CVE-2026-0482
5.4 Medium
-
amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +31 more +33 more
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that...
CVE-2023-20577
7.4 High
-
amd ryzen™ 3000 series desktop processors, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 5000 series desktop processors +10 more +12 more
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM...
CVE-2023-20576
7.7 High
-
amd radeon™ pro v620 graphics products
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial...
CVE-2023-31308
3.3 Low
-
amd radeon™ instinct™ mi25 graphics products, radeon™ pro v620 graphics products +1 more
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged...
CVE-2023-20511
6.4 Medium
-
amd ryzen™ master, ryzen™ master (amd ryzen™ 3000 series processors), ryzen™ master sdk +2 more
A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user...
CVE-2025-54512
7.0 High
-
amd ryzen™ master, ryzen™ master monitoring sdk +1 more
A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local...
CVE-2026-0465
5.6 Medium
-
amd power design manager (pdm) software installer for windows
Incorrect directory permissions could allow a local user to escalate their privileges,...
CVE-2025-0046
7.0 High
-
amd power design manager (pdm) software un-installer
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker...
CVE-2025-8087
7.0 High
-
amd vitis™ unified installer for fpgas & adaptive socs in windows
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a...
CVE-2025-48505
7.3 High
-
amd vitis™ unified installer for fpgas & adaptive socs in windows
Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could...
CVE-2025-48506
7.3 High
-
amd vitis™ embedded single file download (sfd) for windows
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a...
CVE-2025-61970
7.3 High
-
amd vitis™ embedded single file download (sfd) for windows
Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows...
CVE-2025-0041
7.3 High
-
amd vitis™ libraries - security module, vitis™ unified installer for fpgas & adaptive socs in windows +1 more
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow...
CVE-2026-43606
7.7 High
-
amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +14 more +16 more
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute...
CVE-2023-20572
5.6 Medium
-
amd ryzen™ 3000 series desktop processors, ryzen™ 5000 series desktop processors, ryzen™ threadripper™ 3000 series processors +2 more +4 more
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute...
CVE-2023-20540
1.8 Low
-
amd management console (amc), ryzen™ master, µprof +1 more +3 more
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a...
CVE-2026-40677
7.7 High
-
amd epyc™ 7003 series processors, epyc™ 9004 series processor +1 more
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker...
CVE-2024-21944
5.3 Medium
-
amd uprof, µprof, μprof +2 more
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system...
CVE-2026-28237
6.8 Medium
-
amd uprof, µprof, μprof +2 more
Improper access control in AMD uProf may allow a local attacker with user privileges to write to...
CVE-2026-0466
6.8 Medium
-
amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ 9005 series processors +4 more +6 more
Improper access control for register interface in the input-output memory management unit (IOMMU)...
CVE-2025-54509
4.0 Medium
-
amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520 +24 more +26 more
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker...
CVE-2021-46747
7.1 High
-
amd aiter, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 more
AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization
CVE-2026-49121
9.2 Critical
-
amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +14 more +16 more
Improper input validation in the System Management Mode (SMM) communications buffer could allow a...
CVE-2024-36343
4.6 Medium
-
amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 more
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products...
CVE-2025-54518
Fix available
7.3 High
-
amd instinct™ mi210, instinct™ mi250, instinct™ mi250x +6 more +8 more
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a...
CVE-2026-0481
9.2 Critical
-
amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +1 more +3 more
An out of bounds read in the remote management firmware could allow a privileged attacker read a...
CVE-2024-21950
1.8 Low
-
amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 more
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent...
CVE-2025-52532
2.0 Low
-
amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +3 more +5 more
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine ...
CVE-2024-36323
8.8 High
-
amd cleanup utility, radeon™ pro vii, radeon™ pro w5000 series graphics products +9 more +11 more
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve...
CVE-2024-36333
7.0 High
-
amd radeon™ rx 7000 series graphics products
Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious...
CVE-2024-36334
7.0 High
-
amd instinct™ mi210, instinct™ mi300x, instinct™ mi325x +1 more +3 more
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged...
CVE-2026-0427
4.6 Medium
-
amd radeon™ pro v710
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest...
CVE-2024-36332
6.8 Medium
-
amd radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products, ryzen™ 7040 series mobile processors with radeon™ graphics +5 more +7 more
An out-of-bounds read in power management firmware by a malicious local attacker with low...
CVE-2025-0044
4.8 Medium
-
amd radeon™ pro v520, radeon™ pro v620, radeon™ pro w6000 series graphics products +1 more +3 more
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to...
CVE-2023-31309
6.8 Medium
-
amd instinct™ mi210, instinct™ mi250, radeon™ pro w6000 series graphics products +3 more +5 more
Improper restriction of operations within the bounds of a memory buffer in the AMD secure...
CVE-2023-31317
8.8 High
-
amd instinct™ mi210, instinct™ mi250, radeon™ pro v520 +2 more +4 more
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an...
CVE-2025-54511
5.3 Medium
-
amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 more
Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...
CVE-2025-54517
8.5 High
-
amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +9 more +11 more
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...
CVE-2025-66660
1.8 Low
-
amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +10 more +12 more
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an...
CVE-2025-66664
4.6 Medium
-
amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +1 more +3 more
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...
CVE-2026-0428
1.8 Low
-
amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +30 more +32 more
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could...
CVE-2025-48516
6.9 Medium
-
amd instinct™ mi210, instinct™ mi250, radeon™ pro v620 +15 more +17 more
Improperly preserved integrity of hardware configuration state during a power save/restore...
CVE-2023-31316
7.1 High
-
amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +18 more +20 more
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load...
CVE-2022-23826
1.8 Low
-
amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +25 more +27 more
A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow ...
CVE-2021-26380
1.8 Low
-
amd ryzen™ 7040 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors, ryzen™ 8040 series mobile processors with radeon™ graphics +1 more +3 more
Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible...
CVE-2025-0040
5.3 Medium
-
amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +25 more +27 more
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary...
CVE-2024-21962
8.6 High
-
amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more
An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker...
CVE-2025-29935
8.4 High
- Show olderLoading…