Amd Ryzen Embedded 9000 Series Processors (Amd) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-19. Vendor: Amd.
CVEs of Amd Ryzen Embedded 9000 Series Processors
- CVE-2024-36343 - CVSS 4.6 (medium), 2026-05-19: Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or…
- CVE-2026-0432 - CVSS 8.5 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in…
- CVE-2025-48521 - CVSS 6.9 (medium), 2026-05-15: Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially…
- CVE-2026-0438 - CVSS 5.4 (medium), 2026-05-15: A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active…
- CVE-2025-0045 - CVSS 6.9 (medium), 2026-05-15: Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting…
- CVE-2025-48512 - CVSS 7 (high), 2026-05-15: Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve…
- CVE-2024-36345 - CVSS 4.6 (medium), 2026-05-15: Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read,…
- CVE-2025-54502 - CVSS 7.5 (high), 2026-04-16: Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve…
- CVE-2024-36319 - CVSS 6.3 (medium), 2026-02-12: Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to…
- CVE-2024-36324 - CVSS 8.8 (high), 2026-02-11: Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
- CVE-2024-36320 - CVSS 7 (high), 2026-02-11: Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and…
