AMD Prozessoren: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 22

• High 8.8
  CVE-2024-36342

  Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  Sep 6, 2025
• High 8.4
  CVE-2024-36326

  Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from …

  AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ AI 300 Series Processors
  Sep 6, 2025
• High 8.4
  CVE-2024-36352

  Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, pot…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  Sep 6, 2025
• High 7.9
  CVE-2021-26383

  Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised user…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ Embedded V2000 Series Processors
  Sep 5, 2025
• High 7.8
  CVE-2021-46757

  Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the …

  AMD AMD Ryzen™ Embedded V2000 AMD Ryzen™ Embedded 5000
  Feb 13, 2024
• High 7.5
  CVE-2024-21947

  Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary …

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  Sep 6, 2025
• High 7.5
  CVE-2024-36354

  Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7000 Series Desktop Processors
  Sep 6, 2025
• High 7.2
  CVE-2023-31325

  Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the content…

  AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 8000 Series Desktop Processors AMD Radeon™ RX 7000 Series Graphics Products
  Sep 6, 2025
• High 7.2
  CVE-2025-0032

  Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load …

  AMD AMD EPYC™ 9005 Series Processors AMD Ryzen™ 9000 Series Desktop Processors AMD Ryzen™ AI 300 Series Processors
  Sep 6, 2025
• Medium 5.6
  CVE-2023-20572

  An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  Jun 26, 2026
• Medium 5.5
  CVE-2025-0009

  A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potential…

  AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics AMD Ryzen™ 7000 Series Desktop Processors
  Sep 6, 2025
• Medium 5.3
  CVE-2023-31351

  Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resul…

  AMD AMD EPYC™ 9004 Series Processors AMD EPYC™ Embedded 7003 Series Processors AMD EPYC™ 7003 Series Processors
  Sep 6, 2025
• Medium 4.4
  CVE-2024-21970

  Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  Sep 6, 2025
• Medium 4.1
  CVE-2021-26377

  Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious user…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
  Sep 6, 2025
• Low 3.3
  CVE-2025-0011

  Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to o…

  AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ Embedded V2000 Series Processors
  Sep 6, 2025
• Low 3.2
  CVE-2024-21977

  Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RD…

  AMD AMD Ryzen™ 7000 Series Desktop Processors AMD Ryzen™ 5000 Series Desktop Processors AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
  Sep 5, 2025
• Low 3.2
  CVE-2024-36331

  Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-S…

  AMD AMD EPYC™ 9004 Series Processors AMD EPYC™ Embedded 9004 Series Processors EPYC™ Embedded 9004 Series Processors Debian Ubuntu
  Sep 6, 2025
• Low 3.0
  CVE-2021-46750

  Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to s…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
  Sep 6, 2025
• Low 2.8
  CVE-2023-31326

  Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution en…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Desktop Processors
  Sep 6, 2025
• Low 2.5
  CVE-2023-31330

  An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  Sep 6, 2025
• Low 1.8
  CVE-2021-26410

  Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter val…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ Embedded V2000 Series Processors
  Feb 10, 2026
• Low 1.8
  CVE-2023-20540

  An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…

  AMD AMD Ryzen™ 5000 Series Desktop Processors AMD Ryzen™ 3000 Series Desktop Processors AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
  Jun 26, 2026

Revision history

1. 2026-06-28 #19

   Referenz(en) aufgenommen: EUVD-2023-60597, EUVD-2023-60598

2. 2026-03-25 #18

   Neue Updates von Ubuntu aufgenommen

3. 2026-03-04 #17

   Neue Updates von Ubuntu aufgenommen

4. 2026-02-24 #16

   Neue Updates von Ubuntu aufgenommen

5. 2026-02-19 #15

   Neue Updates von Ubuntu aufgenommen

6. 2026-02-18 #14

   Neue Updates von Ubuntu aufgenommen

7. 2026-02-17 #13

   Neue Updates von Ubuntu aufgenommen

8. 2026-02-11 #12

   Neue Updates von Ubuntu aufgenommen

9. 2025-12-15 #11

   Neue Updates von Ubuntu aufgenommen

10. 2025-12-11 #10

    Neue Updates von Oracle Linux aufgenommen

11. 2025-12-03 #9

    Neue Updates von Oracle Linux aufgenommen

12. 2025-11-25 #8

    Neue Updates von Ubuntu aufgenommen

13. 2025-11-23 #7

    Neue Updates von Ubuntu aufgenommen

14. 2025-11-02 #6

    Neue Updates von HP aufgenommen

15. 2025-10-12 #5

    Neue Updates von Debian aufgenommen

16. 2025-09-30 #4

    Neue Updates von HP aufgenommen

17. 2025-09-07 #3

    Referenz(en) aufgenommen: EUVD-2023-35637, EUVD-2021-33406, EUVD-2023-35636, EUVD-2023-35641, EUVD-2023-35662, EUVD-2024-19583, EUVD-2024-54969, EUVD-2024-54970, EUVD-2024-54972, EUVD-2025-27086

18. 2025-08-13 #2

    Neue Updates von HP und Dell aufgenommen

19. 2025-08-12 #1

    Initiale Fassung

References

• AMD Security Bulletin AMD-SB-3028 vom 2025-08-12
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3028.html
• AMD Security Bulletin AMD-SB-7044 vom 2025-08-12
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7044.html
• AMD Security Bulletin AMD-SB-3021 vom 2025-08-12
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3021.html
• AMD Security Bulletin AMD-SB-3014 vom 2025-08-12
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3014.html
• AMD Security Bulletin AMD-SB-4012 vom 2025-08-12
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4012.html
• AMD Security Bulletin AMD-SB-5007 vom 2025-08-12
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5007.html
• Ubuntu Security Notice USN-7934-1 vom 2025-12-15
  https://ubuntu.com/security/notices/USN-7934-1
• Lenovo Security Advisory LEN-200921 vom 2025-08-13
  https://support.lenovo.com/us/en/product_security/LEN-200921
• HP Security Bulletin HPSBHF04045 vom 2025-07-24
  https://support.hp.com/de-de/document/ish_12887718-12887740-16/HPSBHF04045
• Dell Security Advisory DSA-2025-298 vom 2025-08-14
  https://www.dell.com/support/kbdoc/000356333
• HP Security Bulletin HPSBHF04059 vom 2025-09-15
  https://support.hp.com/de-de/document/ish_13045735-13045757-16/HPSBHF04059
• Debian Security Advisory DLA-4328 vom 2025-10-13
  https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
• HP Security Bulletin HPSBHF04073 vom 2025-10-09
  https://support.hp.com/us-en/document/ish_13188050-13188072-16/HPSBHF04073
• Ubuntu Security Notice USN-7879-2 vom 2025-11-21
  https://ubuntu.com/security/notices/USN-7879-2
• Ubuntu Security Notice USN-7879-1 vom 2025-11-21
  https://ubuntu.com/security/notices/USN-7879-1
• Ubuntu Security Notice USN-7880-1 vom 2025-11-21
  https://ubuntu.com/security/notices/USN-7880-1
• Ubuntu Security Notice USN-7879-3 vom 2025-11-26
  https://ubuntu.com/security/notices/USN-7879-3
• Oracle Linux Security Advisory ELSA-2025-20669 vom 2025-12-03
  https://linux.oracle.com/errata/ELSA-2025-20669.html
• Oracle Linux Security Advisory ELSA-2025-28047 vom 2025-12-12
  https://linux.oracle.com/errata/ELSA-2025-28047.html
• Ubuntu Security Notice USN-8028-1 vom 2026-02-11
  https://ubuntu.com/security/notices/USN-8028-1
• Ubuntu Security Notice USN-8031-1 vom 2026-02-12
  https://ubuntu.com/security/notices/USN-8031-1
• Ubuntu Security Notice USN-8028-2 vom 2026-02-12
  https://ubuntu.com/security/notices/USN-8028-2
• Ubuntu Security Notice USN-8028-4 vom 2026-02-17
  https://ubuntu.com/security/notices/USN-8028-4
• Ubuntu Security Notice USN-8028-3 vom 2026-02-17
  https://ubuntu.com/security/notices/USN-8028-3
• Ubuntu Security Notice USN-8028-5 vom 2026-02-17
  https://ubuntu.com/security/notices/USN-8028-5
• Ubuntu Security Notice USN-8031-2 vom 2026-02-18
  https://ubuntu.com/security/notices/USN-8031-2
• Ubuntu Security Notice USN-8028-6 vom 2026-02-19
  https://ubuntu.com/security/notices/USN-8028-6
• Ubuntu Security Notice USN-8031-3 vom 2026-02-19
  https://ubuntu.com/security/notices/USN-8031-3
• Ubuntu Security Notice USN-8028-7 vom 2026-02-19
  https://ubuntu.com/security/notices/USN-8028-7
• Ubuntu Security Notice USN-8028-8 vom 2026-02-24
  https://ubuntu.com/security/notices/USN-8028-8
• Ubuntu Security Notice USN-8052-2 vom 2026-02-24
  https://ubuntu.com/security/notices/USN-8052-2
• Ubuntu Security Notice USN-8074-1 vom 2026-03-04
  https://ubuntu.com/security/notices/USN-8074-1
• Ubuntu Security Notice USN-8074-2 vom 2026-03-04
  https://ubuntu.com/security/notices/USN-8074-2
• Ubuntu Security Notice USN-8126-1 vom 2026-03-25
  https://ubuntu.com/security/notices/USN-8126-1