AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-29933Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of
- CVE-2025-48511Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in cr
- CVE-2025-48510Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availa
- CVE-2025-52538Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting
- CVE-2025-0003Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in
- CVE-2025-0007Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space
- CVE-2025-0005Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting
- CVE-2025-52539A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface
- CVE-2025-54515The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interfa
- CVE-2025-48507The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors acces
- CVE-2024-21923Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary cod
- CVE-2024-21922A DLL hijacking vulnerability in AMD StoreMI™ could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary co
- CVE-2025-48502Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial o
- CVE-2025-62626Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instru
- CVE-2025-29934A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulti
- CVE-2025-0033Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potential
- CVE-2025-0038In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow acces
- CVE-2025-54520Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platfo
- CVE-2024-21935Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands
- CVE-2024-21927Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters i
- CVE-2025-0034Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cau
- CVE-2025-0032Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microco
- CVE-2025-0011Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address
- CVE-2025-0010An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden
- CVE-2025-0009A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a sys
- CVE-2024-36354Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys
- CVE-2024-36352Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to a
- CVE-2024-36346Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input da
- CVE-2024-36342Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu
- CVE-2024-36331Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resul