Amd Ryzen Embedded 8000 Series Processors (Amd) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-19. Vendor: Amd.

CVEs of Amd Ryzen Embedded 8000 Series Processors

CVE-2024-36343 - CVSS 4.6 (medium), 2026-05-19: Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or…
CVE-2025-48513 - CVSS 6.9 (medium), 2026-05-15: Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in…
CVE-2025-0040 - CVSS 5.3 (medium), 2026-05-15: Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to…
CVE-2025-29937 - CVSS 5.8 (medium), 2026-05-15: An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially…
CVE-2025-0028 - CVSS 8.3 (high), 2026-05-15: An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially…
CVE-2025-29936 - CVSS 8.4 (high), 2026-05-15: Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting…
CVE-2025-29944 - CVSS 6.8 (medium), 2026-05-15: A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of…
CVE-2025-0044 - CVSS 4.8 (medium), 2026-05-15: An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of…
CVE-2025-29938 - CVSS 7.1 (high), 2026-05-15: An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in…
CVE-2026-0432 - CVSS 8.5 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in…
CVE-2025-52540 - CVSS 8.5 (high), 2026-05-15: An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds,…
CVE-2025-48521 - CVSS 6.9 (medium), 2026-05-15: Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially…
CVE-2026-0438 - CVSS 5.4 (medium), 2026-05-15: A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active…
CVE-2025-48520 - CVSS 6.9 (medium), 2026-05-15: An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds…
CVE-2025-48519 - CVSS 8.5 (high), 2026-05-15: An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write…
CVE-2025-48512 - CVSS 7 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve…
CVE-2025-0045 - CVSS 6.9 (medium), 2026-05-15: Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting…
CVE-2024-36345 - CVSS 4.6 (medium), 2026-05-15: Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read,…
CVE-2024-36315 - CVSS 5.7 (medium), 2026-05-13: Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information,…
CVE-2025-54502 - CVSS 7.5 (high), 2026-04-16: Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve…
CVE-2023-31364 - CVSS 8.3 (high), 2026-02-26: Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with…
CVE-2024-21961 - CVSS 6 (medium), 2026-02-13: Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to…
CVE-2025-52533 - CVSS 8.7 (high), 2026-02-12: Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data…
CVE-2024-36319 - CVSS 6.3 (medium), 2026-02-12: Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to…
CVE-2025-48518 - CVSS 6.9 (medium), 2026-02-11: Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of…
CVE-2024-36316 - CVSS 5.5 (medium), 2026-02-11: The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service
CVE-2024-36324 - CVSS 8.8 (high), 2026-02-11: Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
CVE-2024-36320 - CVSS 7 (high), 2026-02-11: Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and…
CVE-2025-29949 - CVSS 4.8 (medium), 2026-02-10: Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds…
CVE-2024-36310 - CVSS 4.6 (medium), 2026-02-10: Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially…
CVE-2024-36355 - CVSS 7 (high), 2026-02-10: Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up,…
CVE-2025-0011 - CVSS 3.3 (low), 2025-09-06: Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information…
CVE-2025-0009 - CVSS 5.5 (medium), 2025-09-06: A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss…
CVE-2024-21977 - CVSS 3.2 (low), 2025-09-05: Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting…