AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-36309Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part…
- CVE-2025-0008Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in…
- CVE-2025-48504Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious…
- CVE-2025-29941Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious…
- CVE-2026-0003Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware…
- CVE-2026-0435Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…
- CVE-2026-0454An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global…
- CVE-2026-0480Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…
- CVE-2026-28248Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…
- CVE-2026-28247Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…
- CVE-2026-28249Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV)…
- CVE-2026-40668Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request…
- CVE-2026-40669An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the…
- CVE-2026-40670Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a…
- CVE-2025-0027Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map…
- CVE-2025-29940Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious…
- CVE-2025-52537Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative…
- CVE-2025-52535Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write…
- CVE-2025-54506A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an…
- CVE-2025-54503Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a…
- CVE-2025-54508Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged…
- CVE-2025-54504Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…
- CVE-2025-62620Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status…
- CVE-2025-62621Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map…
- CVE-2026-100493An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an…
- CVE-2026-40652An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted…
- CVE-2026-40661An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially…
- CVE-2026-40660A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read…
- CVE-2026-40659An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted…
- CVE-2026-43603A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.