AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-36333A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in ar
- CVE-2024-36334Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to
- CVE-2026-0427Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to
- CVE-2024-36332Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorize
- CVE-2025-0044An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial los
- CVE-2023-31309Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when expo
- CVE-2023-31317Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or
- CVE-2025-54511Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a functi
- CVE-2025-54517Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.
- CVE-2025-66660Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to c
- CVE-2025-66664Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID
- CVE-2026-0428Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS
- CVE-2025-48516Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to
- CVE-2023-31316Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could
- CVE-2022-23826A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race conditi
- CVE-2021-26380A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range re
- CVE-2025-0040Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with phys
- CVE-2024-21962Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p
- CVE-2025-29935An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated p
- CVE-2025-29944A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting
- CVE-2025-29938An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address
- CVE-2025-29937An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory lo
- CVE-2025-0028An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address
- CVE-2025-29936Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potenti
- CVE-2025-48513Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memo
- CVE-2025-52540An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out
- CVE-2025-48520An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-
- CVE-2025-48519An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or w
- CVE-2025-0045Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot
- CVE-2026-0432Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati