Medium severity · published May 15, 2026
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of…
5.8
CVSS
0.1%
EPSS
No
On KEV
Description
An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ Embedded 8000 Series Processors · AMD
All versions, or not specified · source: vendor
Affected product
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")
AMD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-29937
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-29937
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html
More from AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")
8.5
CVE-2025-52540
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in…
8.5
CVE-2025-48519
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially…
8.4
CVE-2025-29935
An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to…
8.4
CVE-2025-29936
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and…
8.3
CVE-2025-0028
An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of…