# cve.now: AMD

The newest entries naming AMD as an affected vendor (up to 200), of 491 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-36309](https://cve.now/CVE-2024-36309.md): Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part… (CVSS 4.6)
- [CVE-2025-0008](https://cve.now/CVE-2025-0008.md): Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in… (CVSS 8.4)
- [CVE-2025-48504](https://cve.now/CVE-2025-48504.md): Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious… (CVSS 6.8)
- [CVE-2025-29941](https://cve.now/CVE-2025-29941.md): Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious… (CVSS 6.0)
- [CVE-2026-0003](https://cve.now/CVE-2026-0003.md): Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware… (CVSS 5.9)
- [CVE-2026-0435](https://cve.now/CVE-2026-0435.md): Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with… (CVSS 6.0)
- [CVE-2026-0454](https://cve.now/CVE-2026-0454.md): An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global… (CVSS 4.6)
- [CVE-2026-0480](https://cve.now/CVE-2026-0480.md): Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to… (CVSS 6.0)
- [CVE-2026-28248](https://cve.now/CVE-2026-28248.md): Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to… (CVSS 5.9)
- [CVE-2026-28247](https://cve.now/CVE-2026-28247.md): Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a… (CVSS 5.9)
- [CVE-2026-28249](https://cve.now/CVE-2026-28249.md): Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV)… (CVSS 4.6)
- [CVE-2026-40668](https://cve.now/CVE-2026-40668.md): Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request… (CVSS 4.6)
- [CVE-2026-40669](https://cve.now/CVE-2026-40669.md): An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the… (CVSS 4.0)
- [CVE-2026-40670](https://cve.now/CVE-2026-40670.md): Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a… (CVSS 5.9)
- [CVE-2025-0027](https://cve.now/CVE-2025-0027.md): Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map… (CVSS 5.9)
- [CVE-2025-29940](https://cve.now/CVE-2025-29940.md): Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious… (CVSS 5.9)
- [CVE-2025-52537](https://cve.now/CVE-2025-52537.md): Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative… (CVSS 4.0)
- [CVE-2025-52535](https://cve.now/CVE-2025-52535.md): Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write… (CVSS 5.9)
- [CVE-2025-54506](https://cve.now/CVE-2025-54506.md): A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an… (CVSS 4.0)
- [CVE-2025-54503](https://cve.now/CVE-2025-54503.md): Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a… (CVSS 5.9)
- [CVE-2025-54508](https://cve.now/CVE-2025-54508.md): Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged… (CVSS 4.0)
- [CVE-2025-54504](https://cve.now/CVE-2025-54504.md): Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with… (CVSS 5.9)
- [CVE-2025-62620](https://cve.now/CVE-2025-62620.md): Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status… (CVSS 5.9)
- [CVE-2025-62621](https://cve.now/CVE-2025-62621.md): Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map… (CVSS 5.9)
- [CVE-2026-100493](https://cve.now/CVE-2026-100493.md): An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an… (CVSS 6.9)
- [CVE-2026-40652](https://cve.now/CVE-2026-40652.md): An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted… (CVSS 5.2)
- [CVE-2026-40661](https://cve.now/CVE-2026-40661.md): An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially… (CVSS 5.2)
- [CVE-2026-40660](https://cve.now/CVE-2026-40660.md): A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read… (CVSS 5.2)
- [CVE-2026-40659](https://cve.now/CVE-2026-40659.md): An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted… (CVSS 5.1)
- [CVE-2026-43603](https://cve.now/CVE-2026-43603.md): A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service. (CVSS 6.9)
- [CVE-2026-43598](https://cve.now/CVE-2026-43598.md): Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent a (CVSS 7.7)
- [CVE-2026-0461](https://cve.now/CVE-2026-0461.md): Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded (CVSS 7.5)
- [CVE-2026-0482](https://cve.now/CVE-2026-0482.md): In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow craf (CVSS 5.4)
- [CVE-2023-20577](https://cve.now/CVE-2023-20577.md): A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially… (CVSS 7.4)
- [CVE-2023-20576](https://cve.now/CVE-2023-20576.md): Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of ser (CVSS 7.7)
- [CVE-2023-31308](https://cve.now/CVE-2023-31308.md): A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory rea (CVSS 3.3)
- [CVE-2023-20511](https://cve.now/CVE-2023-20511.md): Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potent (CVSS 6.4)
- [CVE-2025-54512](https://cve.now/CVE-2025-54512.md): A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, (CVSS 7.0)
- [CVE-2026-0465](https://cve.now/CVE-2026-0465.md): A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potential (CVSS 5.6)
- [CVE-2025-0046](https://cve.now/CVE-2025-0046.md): Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution. (CVSS 7.0)
- [CVE-2025-8087](https://cve.now/CVE-2025-8087.md): A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstall (CVSS 7.0)
- [CVE-2025-48505](https://cve.now/CVE-2025-48505.md): Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged e (CVSS 7.3)
- [CVE-2025-48506](https://cve.now/CVE-2025-48506.md): Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, (CVSS 7.3)
- [CVE-2025-61970](https://cve.now/CVE-2025-61970.md): Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary cod (CVSS 7.3)
- [CVE-2025-0041](https://cve.now/CVE-2025-0041.md): Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user (CVSS 7.3)
- [CVE-2026-43606](https://cve.now/CVE-2026-43606.md): Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially pe (CVSS 7.7)
- [CVE-2023-20572](https://cve.now/CVE-2023-20572.md): An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe (CVSS 5.6)
- [CVE-2023-20540](https://cve.now/CVE-2023-20540.md): An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe (CVSS 1.8)
- [CVE-2026-40677](https://cve.now/CVE-2026-40677.md): The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially lead (CVSS 7.7)
- [CVE-2024-21944](https://cve.now/CVE-2024-21944.md): Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys (CVSS 5.3)
- [CVE-2026-28237](https://cve.now/CVE-2026-28237.md): Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of ava (CVSS 6.8)
- [CVE-2026-0466](https://cve.now/CVE-2026-0466.md): Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potential (CVSS 6.8)
- [CVE-2025-54509](https://cve.now/CVE-2025-54509.md): Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause (CVSS 4.0)
- [CVE-2021-46747](https://cve.now/CVE-2021-46747.md): Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to m (CVSS 7.1)
- [CVE-2024-36343](https://cve.now/CVE-2024-36343.md): Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of b (CVSS 4.6)
- [CVE-2025-54518](https://cve.now/CVE-2025-54518.md): Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instruction (CVSS 7.3)
- [CVE-2026-0481](https://cve.now/CVE-2026-0481.md): Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized ch (CVSS 9.2)
- [CVE-2024-21950](https://cve.now/CVE-2024-21950.md): An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of establ (CVSS 1.8)
- [CVE-2025-52532](https://cve.now/CVE-2025-52532.md): A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv\_cmd (CVSS 2.0)
- [CVE-2024-36323](https://cve.now/CVE-2024-36323.md): Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized acc (CVSS 8.8)
- [CVE-2024-36333](https://cve.now/CVE-2024-36333.md): A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in ar (CVSS 7.0)
- [CVE-2024-36334](https://cve.now/CVE-2024-36334.md): Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to (CVSS 7.0)
- [CVE-2026-0427](https://cve.now/CVE-2026-0427.md): Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to (CVSS 4.6)
- [CVE-2024-36332](https://cve.now/CVE-2024-36332.md): Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorize (CVSS 6.8)
- [CVE-2025-0044](https://cve.now/CVE-2025-0044.md): An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial los (CVSS 4.8)
- [CVE-2023-31309](https://cve.now/CVE-2023-31309.md): Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when expo (CVSS 6.8)
- [CVE-2023-31317](https://cve.now/CVE-2023-31317.md): Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or (CVSS 8.8)
- [CVE-2025-54511](https://cve.now/CVE-2025-54511.md): Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a functi (CVSS 5.3)
- [CVE-2025-54517](https://cve.now/CVE-2025-54517.md): Out of bounds write in AMD AMDGV\_CMD\_GET\_DIAG\_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. (CVSS 8.5)
- [CVE-2025-66660](https://cve.now/CVE-2025-66660.md): Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV\_SOC\_CMD\_ID\_SRIOV\_CHECK\_TA\_COMPAT to c (CVSS 1.8)
- [CVE-2025-66664](https://cve.now/CVE-2025-66664.md): Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV\_SOC\_CMD\_ID (CVSS 4.6)
- [CVE-2026-0428](https://cve.now/CVE-2026-0428.md): Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV\_SOC\_CMD\_ID\_SRIOV\_COPY\_VF\_CHIPLET\_REGS (CVSS 1.8)
- [CVE-2025-48516](https://cve.now/CVE-2025-48516.md): Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to (CVSS 6.9)
- [CVE-2023-31316](https://cve.now/CVE-2023-31316.md): Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could (CVSS 7.1)
- [CVE-2022-23826](https://cve.now/CVE-2022-23826.md): A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race conditi (CVSS 1.8)
- [CVE-2021-26380](https://cve.now/CVE-2021-26380.md): A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range re (CVSS 1.8)
- [CVE-2025-0040](https://cve.now/CVE-2025-0040.md): Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with phys (CVSS 5.3)
- [CVE-2024-21962](https://cve.now/CVE-2024-21962.md): Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p (CVSS 8.6)
- [CVE-2025-29935](https://cve.now/CVE-2025-29935.md): An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated p (CVSS 8.4)
- [CVE-2025-29944](https://cve.now/CVE-2025-29944.md): A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting (CVSS 6.8)
- [CVE-2025-29938](https://cve.now/CVE-2025-29938.md): An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address (CVSS 7.1)
- [CVE-2025-29937](https://cve.now/CVE-2025-29937.md): An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory lo (CVSS 5.8)
- [CVE-2025-0028](https://cve.now/CVE-2025-0028.md): An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address (CVSS 8.3)
- [CVE-2025-29936](https://cve.now/CVE-2025-29936.md): Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potenti (CVSS 8.4)
- [CVE-2025-48513](https://cve.now/CVE-2025-48513.md): Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memo (CVSS 6.9)
- [CVE-2025-52540](https://cve.now/CVE-2025-52540.md): An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out (CVSS 8.5)
- [CVE-2025-48520](https://cve.now/CVE-2025-48520.md): An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out- (CVSS 6.9)
- [CVE-2025-48519](https://cve.now/CVE-2025-48519.md): An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or w (CVSS 8.5)
- [CVE-2025-0045](https://cve.now/CVE-2025-0045.md): Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot (CVSS 6.9)
- [CVE-2026-0432](https://cve.now/CVE-2026-0432.md): Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati (CVSS 8.5)
- [CVE-2025-48521](https://cve.now/CVE-2025-48521.md): Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condit (CVSS 6.9)
- [CVE-2025-48512](https://cve.now/CVE-2025-48512.md): Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attack (CVSS 7.0)
- [CVE-2024-36345](https://cve.now/CVE-2024-36345.md): Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out (CVSS 4.6)
- [CVE-2026-0438](https://cve.now/CVE-2026-0438.md): A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. (CVSS 5.4)
- [CVE-2025-62619](https://cve.now/CVE-2025-62619.md): Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev (CVSS 6.3)
- [CVE-2025-62625](https://cve.now/CVE-2025-62625.md): Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia (CVSS 6.0)
- [CVE-2025-62628](https://cve.now/CVE-2025-62628.md): Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potential (CVSS 7.0)
- [CVE-2024-36315](https://cve.now/CVE-2024-36315.md): Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens (CVSS 5.7)
- [CVE-2025-61972](https://cve.now/CVE-2025-61972.md): Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SM (CVSS 8.5)
- [CVE-2025-61971](https://cve.now/CVE-2025-61971.md): Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentia (CVSS 5.9)
- [CVE-2025-62627](https://cve.now/CVE-2025-62627.md): An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel me (CVSS 7.2)
- [CVE-2025-62624](https://cve.now/CVE-2025-62624.md): A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially (CVSS 8.8)
- [CVE-2025-62623](https://cve.now/CVE-2025-62623.md): A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially (CVSS 8.8)
- [CVE-2025-54505](https://cve.now/CVE-2025-54505.md): A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor u (CVSS 2.0)
- [CVE-2025-54502](https://cve.now/CVE-2025-54502.md): Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( (CVSS 7.1)
- [CVE-2025-54510](https://cve.now/CVE-2025-54510.md): A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privilege (CVSS 5.9)
- [CVE-2023-20585](https://cve.now/CVE-2023-20585.md): Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger (CVSS 5.6)
- [CVE-2023-31364](https://cve.now/CVE-2023-31364.md): Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f (CVSS 8.3)
- [CVE-2024-21961](https://cve.now/CVE-2024-21961.md): Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual (CVSS 6.0)
- [CVE-2025-54519](https://cve.now/CVE-2025-54519.md): A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary co (CVSS 7.3)
- [CVE-2023-31323](https://cve.now/CVE-2023-31323.md): Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Intercon (CVSS 8.4)
- [CVE-2024-36319](https://cve.now/CVE-2024-36319.md): Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causin (CVSS 6.3)
- [CVE-2023-20601](https://cve.now/CVE-2023-20601.md): Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially resulting in a denial- (CVSS 4.6)
- [CVE-2025-52533](https://cve.now/CVE-2025-52533.md): Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi (CVSS 8.7)
- [CVE-2023-31313](https://cve.now/CVE-2023-31313.md): An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages (CVSS 7.2)
- [CVE-2025-61969](https://cve.now/CVE-2025-61969.md): Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulti (CVSS 7.0)
- [CVE-2025-52541](https://cve.now/CVE-2025-52541.md): A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary cod (CVSS 7.3)
- [CVE-2023-20548](https://cve.now/CVE-2023-20548.md): A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in (CVSS 7.1)
- [CVE-2023-31324](https://cve.now/CVE-2023-31324.md): A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memo (CVSS 7.1)
- [CVE-2025-48518](https://cve.now/CVE-2025-48518.md): Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integ (CVSS 6.9)
- [CVE-2024-36320](https://cve.now/CVE-2024-36320.md): Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential (CVSS 7.0)
- [CVE-2023-20514](https://cve.now/CVE-2023-20514.md): Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to fun (CVSS 8.7)
- [CVE-2024-36324](https://cve.now/CVE-2024-36324.md): Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbit (CVSS 8.8)
- [CVE-2025-48508](https://cve.now/CVE-2025-48508.md): Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control (CVSS 6.0)
- [CVE-2024-36316](https://cve.now/CVE-2024-36316.md): The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denia (CVSS 5.5)
- [CVE-2025-48503](https://cve.now/CVE-2025-48503.md): A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in (CVSS 7.8)
- [CVE-2025-29951](https://cve.now/CVE-2025-29951.md): A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privile (CVSS 7.3)
- [CVE-2024-36311](https://cve.now/CVE-2024-36311.md): A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input valid (CVSS 4.6)
- [CVE-2025-48515](https://cve.now/CVE-2025-48515.md): Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overw (CVSS 5.4)
- [CVE-2021-26410](https://cve.now/CVE-2021-26410.md): Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memo (CVSS 1.8)
- [CVE-2021-26381](https://cve.now/CVE-2021-26381.md): Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a lar (CVSS 7.1)
- [CVE-2025-29949](https://cve.now/CVE-2025-29949.md): Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w (CVSS 4.8)
- [CVE-2024-36355](https://cve.now/CVE-2024-36355.md): Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s (CVSS 7.0)
- [CVE-2024-36310](https://cve.now/CVE-2024-36310.md): Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SM (CVSS 4.6)
- [CVE-2025-29946](https://cve.now/CVE-2025-29946.md): Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. (CVSS 4.5)
- [CVE-2025-0029](https://cve.now/CVE-2025-0029.md): Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA write (CVSS 1.8)
- [CVE-2025-0031](https://cve.now/CVE-2025-0031.md): A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE\_SOCKET policy on a diffe (CVSS 4.6)
- [CVE-2025-48514](https://cve.now/CVE-2025-48514.md): Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, pot (CVSS 4.0)
- [CVE-2025-54514](https://cve.now/CVE-2025-54514.md): Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a (CVSS 4.8)
- [CVE-2025-48509](https://cve.now/CVE-2025-48509.md): Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of (CVSS 1.8)
- [CVE-2025-52534](https://cve.now/CVE-2025-52534.md): Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrit (CVSS 5.3)
- [CVE-2025-0012](https://cve.now/CVE-2025-0012.md): Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged (CVSS 6.8)
- [CVE-2025-29939](https://cve.now/CVE-2025-29939.md): Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) du (CVSS 6.9)
- [CVE-2024-21953](https://cve.now/CVE-2024-21953.md): Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integri (CVSS 5.9)
- [CVE-2025-29950](https://cve.now/CVE-2025-29950.md): Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary c (CVSS 7.1)
- [CVE-2025-29952](https://cve.now/CVE-2025-29952.md): Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP (CVSS 5.9)
- [CVE-2025-52536](https://cve.now/CVE-2025-52536.md): Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting i (CVSS 6.7)
- [CVE-2025-48517](https://cve.now/CVE-2025-48517.md): Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES gues (CVSS 4.6)
- [CVE-2025-29948](https://cve.now/CVE-2025-29948.md): Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, (CVSS 5.9)
- [CVE-2025-29943](https://cve.now/CVE-2025-29943.md): Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially (CVSS 4.6)
- [CVE-2025-29933](https://cve.now/CVE-2025-29933.md): Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of (CVSS 5.5)
- [CVE-2025-48511](https://cve.now/CVE-2025-48511.md): Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in cr (CVSS 5.5)
- [CVE-2025-48510](https://cve.now/CVE-2025-48510.md): Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availa (CVSS 7.1)
- [CVE-2025-52538](https://cve.now/CVE-2025-52538.md): Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting (CVSS 8.0)
- [CVE-2025-0003](https://cve.now/CVE-2025-0003.md): Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in (CVSS 7.3)
- [CVE-2025-0007](https://cve.now/CVE-2025-0007.md): Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space (CVSS 5.7)
- [CVE-2025-0005](https://cve.now/CVE-2025-0005.md): Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting (CVSS 7.3)
- [CVE-2025-52539](https://cve.now/CVE-2025-52539.md): A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (CVSS 7.3)
- [CVE-2025-54515](https://cve.now/CVE-2025-54515.md): The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interfa (CVSS 1.0)
- [CVE-2025-48507](https://cve.now/CVE-2025-48507.md): The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors acces (CVSS 8.6)
- [CVE-2024-21923](https://cve.now/CVE-2024-21923.md): Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary cod (CVSS 7.3)
- [CVE-2024-21922](https://cve.now/CVE-2024-21922.md): A DLL hijacking vulnerability in AMD StoreMI™ could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary co (CVSS 7.3)
- [CVE-2025-48502](https://cve.now/CVE-2025-48502.md): Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial o (CVSS 5.5)
- [CVE-2025-62626](https://cve.now/CVE-2025-62626.md): Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instru (CVSS 7.2)
- [CVE-2025-29934](https://cve.now/CVE-2025-29934.md): A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulti (CVSS 5.3)
- [CVE-2025-0033](https://cve.now/CVE-2025-0033.md): Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potential (CVSS 6.0)
- [CVE-2025-0038](https://cve.now/CVE-2025-0038.md): In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow acces (CVSS 6.6)
- [CVE-2025-54520](https://cve.now/CVE-2025-54520.md): Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platfo (CVSS 8.6)
- [CVE-2024-21935](https://cve.now/CVE-2024-21935.md): Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands (CVSS 5.0)
- [CVE-2024-21927](https://cve.now/CVE-2024-21927.md): Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters i (CVSS 5.0)
- [CVE-2025-0034](https://cve.now/CVE-2025-0034.md): Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV\_SOC\_CMD\_ID\_SRIOV\_SPATIAL\_PART and cau (CVSS 4.7)
- [CVE-2025-0032](https://cve.now/CVE-2025-0032.md): Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microco (CVSS 7.2)
- [CVE-2025-0011](https://cve.now/CVE-2025-0011.md): Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address (CVSS 3.3)
- [CVE-2025-0010](https://cve.now/CVE-2025-0010.md): An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden (CVSS 6.1)
- [CVE-2025-0009](https://cve.now/CVE-2025-0009.md): A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a sys (CVSS 5.5)
- [CVE-2024-36354](https://cve.now/CVE-2024-36354.md): Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys (CVSS 7.5)
- [CVE-2024-36352](https://cve.now/CVE-2024-36352.md): Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to a (CVSS 8.4)
- [CVE-2024-36346](https://cve.now/CVE-2024-36346.md): Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input da (CVSS 6.0)
- [CVE-2024-36342](https://cve.now/CVE-2024-36342.md): Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu (CVSS 8.8)
- [CVE-2024-36331](https://cve.now/CVE-2024-36331.md): Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resul (CVSS 3.2)
- [CVE-2024-36326](https://cve.now/CVE-2024-36326.md): Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, pote (CVSS 8.4)
- [CVE-2024-21970](https://cve.now/CVE-2024-21970.md): Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti (CVSS 4.4)
- [CVE-2024-21947](https://cve.now/CVE-2024-21947.md): Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re (CVSS 7.5)
- [CVE-2023-31365](https://cve.now/CVE-2023-31365.md): An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area result (CVSS 3.9)
- [CVE-2023-31351](https://cve.now/CVE-2023-31351.md): Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integ (CVSS 5.3)
- [CVE-2023-31330](https://cve.now/CVE-2023-31330.md): An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memor (CVSS 2.5)
- [CVE-2023-31326](https://cve.now/CVE-2023-31326.md): Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) drive (CVSS 2.8)
- [CVE-2023-31325](https://cve.now/CVE-2023-31325.md): Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved (CVSS 7.2)
- [CVE-2023-31322](https://cve.now/CVE-2023-31322.md): Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability… (CVSS 8.7)
- [CVE-2023-31306](https://cve.now/CVE-2023-31306.md): Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic (CVSS 3.3)
- [CVE-2023-20516](https://cve.now/CVE-2023-20516.md): Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potent (CVSS 3.3)
- [CVE-2021-46750](https://cve.now/CVE-2021-46750.md): Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed message (CVSS 3.0)
- [CVE-2021-26377](https://cve.now/CVE-2021-26377.md): Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig (CVSS 4.1)
- [CVE-2021-26383](https://cve.now/CVE-2021-26383.md): Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a com (CVSS 7.9)
- [CVE-2024-21977](https://cve.now/CVE-2024-21977.md): Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot (CVSS 3.2)
- [CVE-2024-36357](https://cve.now/CVE-2024-36357.md): A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in th (CVSS 5.6)
- [CVE-2024-36350](https://cve.now/CVE-2024-36350.md): A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting i (CVSS 5.6)
- [CVE-2024-36348](https://cve.now/CVE-2024-36348.md): A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI (CVSS 3.8)
- [CVE-2024-36349](https://cve.now/CVE-2024-36349.md): A transient execution vulnerability in some AMD processors may allow a user process to infer TSC\_AUX even when such a read is disabled, pote (CVSS 3.8)
- [CVE-2024-36347](https://cve.now/CVE-2024-36347.md): Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malic (CVSS 6.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/amd
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.