Amd Ryzen 9000hx Series Processors (Amd) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-15. Vendor: Amd.
CVEs of Amd Ryzen 9000hx Series Processors
- CVE-2025-48516 - CVSS 6.9 (medium), 2026-05-15: Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the…
- CVE-2024-21962 - CVSS 8.6 (high), 2026-05-15: Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege…
- CVE-2026-0438 - CVSS 5.4 (medium), 2026-05-15: A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active…
- CVE-2026-0432 - CVSS 8.5 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in…
- CVE-2025-48512 - CVSS 7 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve…
- CVE-2025-0045 - CVSS 6.9 (medium), 2026-05-15: Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting…
- CVE-2025-62625 - CVSS 6 (medium), 2026-05-14: Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in…
- CVE-2025-62619 - CVSS 6.3 (medium), 2026-05-14: Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys,…
- CVE-2025-54502 - CVSS 7.5 (high), 2026-04-16: Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve…
- CVE-2025-54514 - CVSS 4.8 (medium), 2026-02-10: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of…
- CVE-2025-62626 - CVSS 7.2 (high), 2025-11-21: Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially…
- CVE-2025-0032 - CVSS 7.2 (high), 2025-09-06: Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially…
- CVE-2024-36353 - CVSS 6.5 (medium), 2025-03-02: Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss…
