Amd vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-43598	AI AMD Instinct™ MI308X AMD	7.7	0%	Oct 6	Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an…
CVE-2026-0461	KS Kria SOMs AMD	7.5	0%	Oct 5	Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download…
CVE-2026-0482	VP Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602) AMD	5.4	0%	Oct 5	In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow…
CVE-2023-20577	AR AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics AMD	7.4	0%	Sep 2	A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution
CVE-2023-20576	AR AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics AMD	7.7	0%	Sep 2	Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation
CVE-2023-31308	AR AMD Radeon™ PRO V620 Graphics Products AMD	3.3	0%	Aug 31	A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read
CVE-2023-20511	AR AMD Radeon™ PRO V620 Graphics Products AMD	6.4	0%	Aug 31	Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code…
CVE-2025-54512	AR AMD Ryzen™ Master SDK AMD	7.0	0%	Aug 11	A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code…
CVE-2026-0465	AR AMD Ryzen™ Master Monitoring SDK AMD	5.6	0%	Aug 11	A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability
CVE-2025-0046	AP AMD Power Design Manager (PDM) Software Installer for Windows AMD	7.0	0%	Aug 11	Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution
CVE-2025-8087	AP AMD Power Design Manager (PDM) Software Un-Installer AMD	7.0	0%	Aug 11	A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in…
CVE-2025-48505	VU Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows AMD	1.0	0%	Aug 11	Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in…
CVE-2025-48506	VU Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows AMD	4.6	0%	Aug 11	Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code…
CVE-2025-61970	VE Vitis™ Embedded Single File Download (SFD) for Windows AMD	1.0	0%	Aug 11	Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary…
CVE-2025-0041	VE Vitis™ Embedded Single File Download (SFD) for Windows AMD	4.6	0%	Aug 11	Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution
CVE-2026-43606	VU Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows AMD	8.5	0%	Aug 11	Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or…
CVE-2023-20572	AR AMD Ryzen™ Threadripper™ 7000 Processors AMD	5.6	0%	Jun 26	An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of…
CVE-2023-20540	AR AMD Ryzen™ Threadripper™ 3000 Series Processors AMD	1.8	0%	Jun 26	An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary…
CVE-2026-40677	AR AMD Ryzen™ Master AMD	7.7	0%	Jun 12	The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution
CVE-2024-21944	AE AMD EPYC™ 7003 Series Processors AMD	5.3	0%	Jun 10	Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or…
CVE-2026-28237	AΜ AMD µProf AMD	5.5	0%	Jun 9	Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability
CVE-2026-0466	AΜ AMD µProf AMD	5.5	0%	Jun 9	Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of…
CVE-2025-54509	AE AMD EPYC™ Embedded 8004 Series Processors AMD	4.0	0%	Jun 9	Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD…
CVE-2021-46747	AR AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD	7.1	0%	Jun 1	Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management…
CVE-2026-49121	AI Aiter Amd	9.8	1%	Jun 1	AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization
CVE-2024-36343	AR AMD Ryzen™ Embedded 9000 Series Processors AMD	4.6	0%	May 19	Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited…
CVE-2025-54518	AR AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics AMD	7.0	0%	May 15	Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…
CVE-2026-0481	AI AMD Instinct™ MI300X AMD	9.2	0%	May 15	Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration,…
CVE-2024-21950	AI AMD Instinct™ MI300X AMD	1.8	0%	May 15	An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in…
CVE-2025-52532	AR AMD Radeon™ PRO V620 AMD	2.0	0%	May 15	A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be…
CVE-2024-36323	AI AMD Instinct™ MI300A AMD	8.8	0%	May 15	Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG…
CVE-2024-36333	AC AMD Cleanup Utility AMD	7.8	0%	May 15	A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution
CVE-2024-36334	AR AMD Radeon™ RX 7000 Series Graphics Products AMD	7.0	0%	May 15	Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges…
CVE-2026-0427	AI AMD Instinct™ MI325X AMD	4.6	0%	May 15	Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from…
CVE-2024-36332	AR AMD Radeon™ PRO V710 AMD	6.8	0%	May 15	Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of…
CVE-2025-0044	AR AMD Radeon™ PRO W7000 Series Graphics Products AMD	4.8	0%	May 15	An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability
CVE-2023-31309	AR AMD Radeon™ RX 6000 Series Graphics Products AMD	6.8	0%	May 15	Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM…
CVE-2023-31317	AR AMD Radeon™ PRO W6000 Series Graphics Products AMD	8.8	0%	May 15	Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially…
CVE-2025-54511	AI AMD Instinct™ MI210 AMD	5.3	0%	May 15	Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and…
CVE-2025-54517	AI AMD Instinct™ MI300A AMD	8.5	0%	May 15	Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution
CVE-2025-66660	AR AMD Radeon™ PRO W6000 Series Graphics Products AMD	1.8	0%	May 15	Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping,…
CVE-2025-66664	AI AMD Instinct™ MI300X AMD	4.6	0%	May 15	Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause…
CVE-2026-0428	AI AMD Instinct™ MI300A AMD	1.8	0%	May 15	Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die,…
CVE-2025-48516	AR AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors AMD	6.9	0%	May 15	Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface…
CVE-2023-31316	AR AMD Ryzen™ Embedded V3000 Series Processors AMD	7.1	0%	May 15	Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to…
CVE-2022-23826	AI AMD Instinct™ MI210 AMD	1.8	0%	May 15	A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of…
CVE-2021-26380	AR AMD Radeon™ RX Vega Series Graphics Cards AMD	1.8	0%	May 15	A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity
CVE-2025-0040	AR AMD Ryzen™ Embedded 8000 Series Processors AMD	5.3	0%	May 15	Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the…
CVE-2024-21962	AR AMD Ryzen™ 4000 Series Desktop Processors AMD	8.6	0%	May 15	Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code…
CVE-2025-29935	AR AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") AMD	8.4	0%	May 15	An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to…
CVE-2025-29944	AR AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt") AMD	6.8	0%	May 15	A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash
CVE-2025-29938	AR AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") AMD	7.1	0%	May 15	An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or…
CVE-2025-29937	AR AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") AMD	5.8	0%	May 15	An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of…
CVE-2025-0028	AR AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") AMD	8.3	0%	May 15	An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of…
CVE-2025-29936	AR AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point") AMD	8.4	0%	May 15	Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and…
CVE-2025-48513	AR AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") AMD	6.9	0%	May 15	Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality…
CVE-2025-52540	AR AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") AMD	8.5	0%	May 15	An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in…
CVE-2025-48520	AR AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") AMD	6.9	0%	May 15	An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds potentially resulting in…
CVE-2025-48519	AR AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix") AMD	8.5	0%	May 15	An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially…
CVE-2025-0045	AR AMD Ryzen™ Embedded R2000 Series Processors AMD	6.9	0%	May 15	Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial…