Skip to contentAmd vulnerabilities
Products
Show 140 moreShow less
Newest
- amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), ryzen™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), ryzen™ 4000 series mobile processors with radeon™ graphics (formerly codenamed "renoir") +13 more +15 moreA buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to...CVE-2025-299446.8 Medium
- amd ryzen embedded 8000 series processors, ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +1 more +3 moreAn unchecked return value within the AMD Platform Management Framework (PMF) could allow an...CVE-2025-299387.1 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker...CVE-2025-299375.8 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn unchecked return value within the AMD Platform Management Framework (PMF) could allow an...CVE-2025-00288.3 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +4 more +6 moreImproper input validation within the AMD Platform Management Framework (PMF) could allow an...CVE-2025-299368.4 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +3 more +5 moreUse of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an...CVE-2025-485136.9 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn improper input validation vulnerability within the AMD Platform Management Framework (PMF)...CVE-2025-525408.5 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn improper input validation vulnerability within the AMD Platform Management Framework (PMF)...CVE-2025-485206.9 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn improper input validation vulnerability within the AMD Platform Management Framework (PMF)...CVE-2025-485198.5 High
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ embedded 4004 series processors +37 more +39 moreImproper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker...CVE-2025-00456.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +43 more +45 moreIncorrect default permissions in the installation directory for the AMD chipset driver could...CVE-2026-04328.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +41 more +43 moreImproper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local...CVE-2025-485216.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +49 more +51 moreIncorrect default permissions in the installation directory for the AMD general-purpose input...CVE-2025-485127.0 High
- amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +15 more +17 moreImproper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could...CVE-2024-363454.6 Medium
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, ryzen™ 7000 series desktop processors +21 more +23 moreA System Management Mode (SMM) handler could perform a callout to code located in non-SMM...CVE-2026-04385.4 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, device management portal (admp), ryzen™ 3000 series desktop processors +23 more +25 moreMissing authentication in the KVM key download endpoint could allow an unauthenticated attacker...CVE-2025-626196.3 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, device management portal (admp), ryzen™ 3000 series desktop processors +27 more +29 moreImproper privilege management in the KVM key download component could allow an attacker to swap...CVE-2025-626256.0 Medium
- amd aim-t manageability service, cloud manageability service (acms), manageability api +3 more +5 moreUnsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged...CVE-2025-626287.0 High
- amd epyc™ 8004 series processors, epyc™ embedded 8004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "bergamo") +14 more +16 moreImproper enforcement of the LFENCE serialization property may allow an attacker to bypass...CVE-2024-36315Fix available5.7 Medium
- amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ 9005 series processors +4 more +6 moreMissing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution…CVE-2025-619728.5 High
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreMissing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.CVE-2025-619715.9 Medium
- amd esxi 8.x and esxi 9.x hosts using amd-pensando dpu productsAn untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an...CVE-2025-626277.2 High
- amd esxi 8.x and esxi 9.x hosts using amd-pensando dpu productsA heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to...CVE-2025-626248.8 High
- amd esxi 8.x and esxi 9.x hosts using amd-pensando dpu productsA heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to...CVE-2025-626238.8 High
- amd epyc™ 7001 series processors, epyc™ embedded 3000 series processors +1 moreA transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to...CVE-2025-54505Public exploitFix available2.0 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 moreIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could...CVE-2025-545027.1 High
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreA missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally...CVE-2025-545105.9 Medium
- amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +1 more +3 moreInsufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with...CVE-2023-20585Fix available5.6 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +30 more +32 moreImproper handling of direct memory writes in the input-output memory management unit could allow...CVE-2023-313648.3 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 moreImproper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow...CVE-2024-219616.0 Medium
- amd vivado™ documentation navigator installation (windows)A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege...CVE-2025-545197.3 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 moreType confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed...CVE-2023-313238.4 High
- amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +11 more +13 moreDebug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to...CVE-2024-363196.3 Medium
- amd radeon™ pro vii, radeon™ vii +1 moreImproper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds...CVE-2023-206014.6 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 moreImproper Access Control in an on-chip debug interface could allow a privileged attacker to enable...CVE-2025-525338.7 High
- amd instinct™ mi210, instinct™ mi250 +1 moreAn unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a...CVE-2023-313137.2 High
- amd µprof, μprof +1 moreIncorrect permission assignment in AMD µProf may allow a local user-privileged attacker to...CVE-2025-619697.0 High
- amd vivado™ installation (windows)A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege...CVE-2025-525417.3 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +9 more +11 moreA Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow...CVE-2023-205487.1 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +7 more +9 moreA Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow...CVE-2023-313247.1 High
- amd radeon™ pro v710, radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +7 more +9 moreImproper input validation in AMD Graphics Driver could allow a local attacker to write out of...CVE-2025-485186.9 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro vii, radeon™ pro w5000 series graphics products +34 more +36 moreInteger Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write...CVE-2024-363207.0 High
- amd radeon™ pro v620, radeon™ pro vii, radeon™ pro w6000 series graphics products +5 more +7 moreImproper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged...CVE-2023-205148.7 High
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +21 more +23 moreImproper input validation in AMD Graphics Driver could allow an attacker to supply a specially...CVE-2024-363248.8 High
- amd radeon™ pro v710Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged...CVE-2025-485086.0 Medium
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +14 more +16 moreThe integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass...CVE-2024-363165.5 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), radeon™ pro w5000 series graphics products +25 more +27 moreA DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve...CVE-2025-485037.8 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ embedded r1000 series processors, ryzen™ embedded r2000 series processors +1 more +3 moreA buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to...CVE-2025-299517.3 High
- amd ryzen™ 7000 series desktop processors, ryzen™ 7045 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors +3 more +5 moreA Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow...CVE-2024-363114.6 Medium
- amd ryzen™ 4000 series desktop processors, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processors with radeon™ graphics +3 more +5 moreInsufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an...CVE-2025-485155.4 Medium
- Show moreLoading…