High severity · published May 15, 2026
CVE-2025-29936
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and…
8.4
CVSS
0.1%
EPSS
No
On KEV
Description
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ Al Max+ · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ Embedded 8000 Series Processors · AMD
All versions, or not specified · source: vendor
Affected product
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")
AMD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-29936
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-29936
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html
More from AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")
8.5
CVE-2025-52540
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in…
8.5
CVE-2025-48519
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially…
8.4
CVE-2025-29935
An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to…
8.3
CVE-2025-0028
An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of…
7.0
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation…