Amd Ryzen vulnerabilities

• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +38 more +40 more A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and... CVE-2026-43603 6.9 MediumNovember 3, 2026
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +31 more +33 more A heap overflow in SMM module may allow an attacker with access to a second vulnerability that... CVE-2023-20577 7.4 HighSeptember 2, 2026
• amd ryzen™ 3000 series desktop processors, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 5000 series desktop processors +10 more +12 more Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM... CVE-2023-20576 7.7 HighSeptember 2, 2026
• amd ryzen™ master, ryzen™ master (amd ryzen™ 3000 series processors), ryzen™ master sdk +2 more A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user... CVE-2025-54512 7.0 HighAugust 11, 2026
• amd ryzen™ master, ryzen™ master monitoring sdk +1 more A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local... CVE-2026-0465 5.6 MediumAugust 11, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +14 more +16 more An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute... CVE-2023-20572 5.6 MediumJune 26, 2026
• amd ryzen™ 3000 series desktop processors, ryzen™ 5000 series desktop processors, ryzen™ threadripper™ 3000 series processors +2 more +4 more An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute... CVE-2023-20540 1.8 LowJune 26, 2026
• amd management console (amc), ryzen™ master, µprof +1 more +3 more The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a... CVE-2026-40677 7.7 HighJune 12, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520 +24 more +26 more Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker... CVE-2021-46747 7.1 HighJune 1, 2026
• amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +14 more +16 more Improper input validation in the System Management Mode (SMM) communications buffer could allow a... CVE-2024-36343 4.6 MediumMay 19, 2026
• amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 more Improper isolation of shared resources within the CPU operation cache on Zen 2-based products... CVE-2025-54518 Fix available 7.3 HighMay 15, 2026
• amd radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products, ryzen™ 7040 series mobile processors with radeon™ graphics +5 more +7 more An out-of-bounds read in power management firmware by a malicious local attacker with low... CVE-2025-0044 4.8 MediumMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +30 more +32 more Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could... CVE-2025-48516 6.9 MediumMay 15, 2026
• amd instinct™ mi210, instinct™ mi250, radeon™ pro v620 +15 more +17 more Improperly preserved integrity of hardware configuration state during a power save/restore... CVE-2023-31316 7.1 HighMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +18 more +20 more A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load... CVE-2022-23826 1.8 LowMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +25 more +27 more A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow ... CVE-2021-26380 1.8 LowMay 15, 2026
• amd ryzen™ 7040 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors, ryzen™ 8040 series mobile processors with radeon™ graphics +1 more +3 more Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible... CVE-2025-0040 5.3 MediumMay 15, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +25 more +27 more Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary... CVE-2024-21962 8.6 HighMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker... CVE-2025-29935 8.4 HighMay 15, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), ryzen™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), ryzen™ 4000 series mobile processors with radeon™ graphics (formerly codenamed "renoir") +13 more +15 more A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to... CVE-2025-29944 6.8 MediumMay 15, 2026
• amd ryzen embedded 8000 series processors, ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +1 more +3 more An unchecked return value within the AMD Platform Management Framework (PMF) could allow an... CVE-2025-29938 7.1 HighMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker... CVE-2025-29937 5.8 MediumMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An unchecked return value within the AMD Platform Management Framework (PMF) could allow an... CVE-2025-0028 8.3 HighMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +4 more +6 more Improper input validation within the AMD Platform Management Framework (PMF) could allow an... CVE-2025-29936 8.4 HighMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +3 more +5 more Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an... CVE-2025-48513 6.9 MediumMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An improper input validation vulnerability within the AMD Platform Management Framework (PMF)... CVE-2025-52540 8.5 HighMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An improper input validation vulnerability within the AMD Platform Management Framework (PMF)... CVE-2025-48520 6.9 MediumMay 15, 2026
• amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 more An improper input validation vulnerability within the AMD Platform Management Framework (PMF)... CVE-2025-48519 8.5 HighMay 15, 2026
• amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ embedded 4004 series processors +37 more +39 more Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker... CVE-2025-0045 6.9 MediumMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +43 more +45 more Incorrect default permissions in the installation directory for the AMD chipset driver could... CVE-2026-0432 8.5 HighMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +41 more +43 more Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local... CVE-2025-48521 6.9 MediumMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +49 more +51 more Incorrect default permissions in the installation directory for the AMD general-purpose input... CVE-2025-48512 7.0 HighMay 15, 2026
• amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +15 more +17 more Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could... CVE-2024-36345 4.6 MediumMay 15, 2026
• amd epyc™ 4004 series processors, epyc™ 4005 series processors, ryzen™ 7000 series desktop processors +21 more +23 more A System Management Mode (SMM) handler could perform a callout to code located in non-SMM... CVE-2026-0438 5.4 MediumMay 15, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, device management portal (admp), ryzen™ 3000 series desktop processors +23 more +25 more Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker... CVE-2025-62619 6.3 MediumMay 14, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, device management portal (admp), ryzen™ 3000 series desktop processors +27 more +29 more Improper privilege management in the KVM key download component could allow an attacker to swap... CVE-2025-62625 6.0 MediumMay 14, 2026
• amd epyc™ 8004 series processors, epyc™ embedded 8004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "bergamo") +14 more +16 more Improper enforcement of the LFENCE serialization property may allow an attacker to bypass... CVE-2024-36315 Fix available 5.7 MediumMay 13, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 more Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could... CVE-2025-54502 7.1 HighApril 16, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +30 more +32 more Improper handling of direct memory writes in the input-output memory management unit could allow... CVE-2023-31364 8.3 HighFebruary 26, 2026
• amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 more Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow... CVE-2024-21961 6.0 MediumFebruary 12, 2026
• amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +11 more +13 more Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to... CVE-2024-36319 6.3 MediumFebruary 12, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 more Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable... CVE-2025-52533 8.7 HighFebruary 12, 2026
• amd radeon™ pro v710, radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +7 more +9 more Improper input validation in AMD Graphics Driver could allow a local attacker to write out of... CVE-2025-48518 6.9 MediumFebruary 11, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro vii, radeon™ pro w5000 series graphics products +34 more +36 more Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write... CVE-2024-36320 7.0 HighFebruary 11, 2026
• amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +21 more +23 more Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially... CVE-2024-36324 8.8 HighFebruary 11, 2026
• amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +14 more +16 more The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass... CVE-2024-36316 5.5 MediumFebruary 11, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), radeon™ pro w5000 series graphics products +25 more +27 more A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve... CVE-2025-48503 7.8 HighFebruary 11, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ embedded r1000 series processors, ryzen™ embedded r2000 series processors +1 more +3 more A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to... CVE-2025-29951 7.3 HighFebruary 10, 2026
• amd ryzen™ 7000 series desktop processors, ryzen™ 7045 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors +3 more +5 more A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow... CVE-2024-36311 4.6 MediumFebruary 10, 2026
• amd ryzen™ 4000 series desktop processors, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processors with radeon™ graphics +3 more +5 more Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an... CVE-2025-48515 5.4 MediumFebruary 10, 2026
• Show olderLoading…