Skip to contentAmd Ryzen™ Embedded 7000 vulnerabilities
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 9005 series processors +47 more +49 moreInsufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an...CVE-2024-363446.9 Medium
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ 7001 series processors +44 more +46 moreAn out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt...CVE-2024-21963Fix available6.0 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +48 more +50 moreMissing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use...CVE-2024-363094.6 Medium
- amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +14 more +16 moreImproper input validation in the System Management Mode (SMM) communications buffer could allow a...CVE-2024-363434.6 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), ryzen™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), ryzen™ 4000 series mobile processors with radeon™ graphics (formerly codenamed "renoir") +13 more +15 moreA buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to...CVE-2025-299446.8 Medium
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ embedded 4004 series processors +37 more +39 moreImproper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker...CVE-2025-00456.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +43 more +45 moreIncorrect default permissions in the installation directory for the AMD chipset driver could...CVE-2026-04328.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +41 more +43 moreImproper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local...CVE-2025-485216.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +49 more +51 moreIncorrect default permissions in the installation directory for the AMD general-purpose input...CVE-2025-485127.0 High
- amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +15 more +17 moreImproper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could...CVE-2024-363454.6 Medium
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, ryzen™ 7000 series desktop processors +21 more +23 moreA System Management Mode (SMM) handler could perform a callout to code located in non-SMM...CVE-2026-04385.4 Medium
- amd epyc™ 8004 series processors, epyc™ embedded 8004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "bergamo") +14 more +16 moreImproper enforcement of the LFENCE serialization property may allow an attacker to bypass...CVE-2024-36315Fix available5.7 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 moreIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could...CVE-2025-545027.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +30 more +32 moreImproper handling of direct memory writes in the input-output memory management unit could allow...CVE-2023-313648.3 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 moreImproper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow...CVE-2024-219616.0 Medium
- amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +11 more +13 moreDebug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to...CVE-2024-363196.3 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 moreImproper Access Control in an on-chip debug interface could allow a privileged attacker to enable...CVE-2025-525338.7 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro vii, radeon™ pro w5000 series graphics products +34 more +36 moreInteger Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write...CVE-2024-363207.0 High
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +21 more +23 moreImproper input validation in AMD Graphics Driver could allow an attacker to supply a specially...CVE-2024-363248.8 High
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +14 more +16 moreThe integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass...CVE-2024-363165.5 Medium
- amd ryzen™ 7000 series desktop processors, ryzen™ 7045 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors +3 more +5 moreA Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow...CVE-2024-363114.6 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +32 more +34 moreImproper input validation in the SMM handler could allow an attacker with Ring0 access to write...CVE-2024-363557.0 High
- amd radeon™ pro v520 graphics products, radeon™ pro v620 graphics products, radeon™ pro v710 graphics products +16 more +18 moreImproper removal of sensitive information before storage or transfer in AMD Crash Defender could...CVE-2025-00113.3 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520 graphics products +25 more +27 moreA NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output...CVE-2025-00095.5 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +33 more +35 moreImproper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker...CVE-2024-363547.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +37 more +39 moreImproper input validation in the GPU driver could allow an attacker to exploit a heap overflow...CVE-2024-363428.8 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +22 more +24 moreImproper validation of an array index in the AND power Management Firmware could allow a...CVE-2024-219704.4 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +17 more +19 moreIncomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade...CVE-2024-219773.2 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +29 more +31 moreA transient execution vulnerability in some AMD processors may allow a user process to infer the...CVE-2024-363483.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ embedded 3000 series processors +35 more +37 moreA transient execution vulnerability in some AMD processors may allow a user process to infer...CVE-2024-363493.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series +43 more +45 moreImproper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with...CVE-2024-36347Fix available6.4 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +29 more +31 moreImproper input validation in AMD Crash Defender could allow an attacker to provide the Windows®...CVE-2024-219715.5 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors, epyc™ 9004 processors +22 more +24 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313457.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313437.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313427.5 High
- amd ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processor with radeon™ graphics +11 more +13 moreImproper access control in the DRTM firmware could allow a privileged attacker to perform...CVE-2023-313313.0 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper access control in the fTPM driver in the trusted OS could allow a privileged attacker to...CVE-2023-205155.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +12 more +14 moreAn integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...CVE-2023-205072.3 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +25 more +27 moreSMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally...CVE-2024-01798.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +34 more +36 moreImproper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to...CVE-2024-219258.2 High
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors +23 more +25 moreIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker...CVE-2023-205181.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...CVE-2021-467465.2 Medium
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205944.4 Medium