AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-36336Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentia
- CVE-2024-36328Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or avai
- CVE-2024-36337Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality,
- CVE-2025-0014Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potential
- CVE-2024-36353Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potential
- CVE-2024-21971Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, r
- CVE-2023-31345Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execu
- CVE-2023-20508Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled b
- CVE-2023-31352A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private d
- CVE-2023-31343Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execu
- CVE-2023-31342Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execu
- CVE-2023-31331Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stac
- CVE-2023-20582Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults
- CVE-2023-20581Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory int
- CVE-2023-20515Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading
- CVE-2023-20507An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data in
- CVE-2024-0179SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentia
- CVE-2024-21925Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code ex
- CVE-2024-21924SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially
- CVE-2023-31361A DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability Service could allow an attacker to achieve privi
- CVE-2023-31360Incorrect default permissions in the AMD Integrated Management Technology (AIM-T) Manageability Service installation directory could allow a
- CVE-2024-21966A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulti
- CVE-2024-56161Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malic
- CVE-2024-21976Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary c
- CVE-2024-21975Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary c
- CVE-2024-21974Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary c
- CVE-2024-21958Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation
- CVE-2024-21957Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation p
- CVE-2024-21949Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to
- CVE-2024-21946Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalati