Skip to contentAmd vulnerabilities
Products
Show 140 moreShow less
Newest
- amd aim-t (amd integrated management technology) softwareA DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability...CVE-2023-313617.3 High
- amd aim-t(amd integrated management technology) softwareIncorrect default permissions in the AMD Integrated Management Technology (AIM-T) Manageability...CVE-2023-313607.3 High
- amd ryzen™ master utilityA DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to...CVE-2024-219667.3 High
- amd epyc™ 7001 series, epyc™ 7002 series, epyc™ 7003 series +1 more +3 moreamd64-microcode - security updateCVE-2024-56161Fix available7.2 High
- amd ryzen™ ai softwareImproper input validation in the NPU driver could allow an attacker to supply a specially crafted...CVE-2024-219768.8 High
- amd ryzen™ ai software, ryzen ai software +1 moreImproper input validation in the NPU driver could allow an attacker to supply a specially crafted...CVE-2024-219758.8 High
- amd ryzen™ ai software, ryzen ai software +1 moreImproper input validation in the NPU driver could allow an attacker to supply a specially crafted...CVE-2024-219748.8 High
- amd provisioning console, provisioning console (apc) software, provisioning console apc software +2 moreIncorrect default permissions in the AMD Provisioning Console installation directory could allow...CVE-2024-219587.3 High
- amd management consoleIncorrect default permissions in the AMD Management Console installation directory could allow an...CVE-2024-219577.3 High
- amd ryzen™ ai software, ryzen ai software +1 moreImproper validation of user input in the NPU driver could allow an attacker to provide a buffer...CVE-2024-219495.5 Medium
- amd ryzen master utility for overclocking control, ryzen master +1 moreIncorrect default permissions in the AMD RyzenTM Master Utility installation directory could...CVE-2024-219467.3 High
- amd ryzen™ master monitoring sdk, ryzen master, ryzen master monitoring software development kit +2 moreIncorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory...CVE-2024-219457.3 High
- amd cloud manageability service, cloud manageability service software, cloud manageability service acms software +2 moreIncorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation...CVE-2024-219397.3 High
- amd management plug-in for sccm, management plugin for sccm +1 moreIncorrect default permissions in the AMD Management Plugin for the Microsoft® System Center...CVE-2024-219387.3 High
- amd software: adrenalin edition, software: cloud edition, software: pro edition +5 more +7 moreIncorrect default permissions in the AMD HIP SDK installation directory could allow an attacker...CVE-2024-219377.3 High
- amd uprof, μprof tool +1 moreImproper input validation in AMD μProf could allow an attacker to perform a write to an invalid...CVE-2023-313663.3 Low
- amd uprof, μprof tool +1 moreIncorrect default permissions in the AMD μProf installation directory could allow an attacker to...CVE-2023-313497.3 High
- amd uprof, uprof tool, μprof tool +2 moreA DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege...CVE-2023-313487.3 High
- amd uprof, μprof tool +1 moreInsufficient
validation of the Input Output Control (IOCTL) input buffer in AMD μProf may
allow...CVE-2023-313417.3 High
- amd trusted firmware-a, zynq™ ultrascale+™ mpsoc/rfsoc +1 moreImproper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC...CVE-2023-313394.8 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access...CVE-2024-219815.7 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc™ embedded 7003 +1 more +3 moreIncomplete system memory cleanup in SEV firmware could
allow a privileged attacker to corrupt...CVE-2023-31356Fix available4.4 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreImproper input validation in Power Management Firmware (PMFW) may allow an attacker with...CVE-2023-313105.0 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards, radeon software +2 moreImproper validation of array index in Power Management Firmware (PMFW) may allow a privileged...CVE-2023-313072.3 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreImproper input validation in SMU may allow an attacker with privileges and a compromised physical...CVE-2023-313042.3 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreGeneration of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware)...CVE-2023-313051.9 Low
- amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 moreImproper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform...CVE-2023-205916.5 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 moreIOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs),...CVE-2023-20584Fix available5.3 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors +23 more +25 moreIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker...CVE-2023-205181.9 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreAn insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize...CVE-2023-205133.3 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreA hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key,...CVE-2023-205121.9 Low
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards, radeon software +2 moreAn insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an...CVE-2023-205104.7 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ pro w7000 series graphics cards, radeon™ rx 6000 series graphics cards +1 more +3 moreAn insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA...CVE-2023-205095.2 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210, instinct™ mi250 +38 more +40 moreInsufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA...CVE-2022-238177.3 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzentm embedded r1000 +23 more +25 moreImproper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write...CVE-2022-238157.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors +24 more +26 moreInsufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS...CVE-2021-467723.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...CVE-2021-467465.2 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +28 more +30 moreInsufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD...CVE-2021-263873.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro w6000 series graphics cards +48 more +50 moreA malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow...CVE-2021-263675.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2024-21980Public exploit7.9 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...CVE-2024-21978Public exploit6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2023-31355Public exploit6.0 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +23 more +25 moreA potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ...CVE-2022-238298.2 High
- amd software: adrenalin edition, software: pro edition, radeon directx 11 driver dll +2 moreAn out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could...CVE-2024-219795.3 Medium
- amd software: adrenalin edition, software: pro edition +1 moreAn out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could...CVE-2024-219725.3 Medium
- amd cpu, xen +1 moreSpeculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.CVE-2024-2193Public exploitFix available5.7 Medium
- amd ryzen™ 3000 series processors with radeon™ graphics, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +140 more +142 moreImproper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel...CVE-2023-205796.0 Medium
- Show moreLoading…