AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-36326Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, pote
- CVE-2024-21970Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti
- CVE-2024-21947Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re
- CVE-2023-31365An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area result
- CVE-2023-31351Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integ
- CVE-2023-31330An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memor
- CVE-2023-31326Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) drive
- CVE-2023-31325Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved
- CVE-2023-31322Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability…
- CVE-2023-31306Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic
- CVE-2023-20516Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potent
- CVE-2021-46750Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed message
- CVE-2021-26377Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig
- CVE-2021-26383Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a com
- CVE-2024-21977Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot
- CVE-2024-36357A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in th
- CVE-2024-36350A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting i
- CVE-2024-36348A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI
- CVE-2024-36349A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote
- CVE-2024-36347Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malic
- CVE-2023-20599Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) re
- CVE-2025-0036In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause d
- CVE-2025-0037In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow ac
- CVE-2023-31359Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in
- CVE-2023-31358A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in
- CVE-2025-0035Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbi
- CVE-2024-36321Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrar
- CVE-2024-36339A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resul
- CVE-2024-21960Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve privilege
- CVE-2024-36340A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting