CVE-2025-0044

An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.

Score

CVSS 4.0 4.8 Medium

Status

Awaiting Analysis - psirt@amd.com

Published

2026-05-15

Last modified

2026-05-15

Weaknesses

CWE-125

Affected products

• Amd Radeon Pro W7000 Series Graphics Products (Amd)
• Amd Radeon Rx 7000 Series Graphics Products (Amd)
• Amd Ryzen 7040 Series Mobile Processors With Radeon Graphics (Amd)
• Amd Ryzen 8000 Series Desktop Processors (Amd)
• Amd Ryzen 8040 Series Mobile Processors With Radeon Graphics (Amd)
• Amd Ryzen Ai 300 Series Processors (Amd)
• Amd Ryzen Al Max (Amd)
• Amd Ryzen Embedded 8000 Series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html