Vendor
AMD
467 known vulnerabilities.
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 52
AMD Ryzen™ 7000 Series Desktop Processors 50
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 36
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ Embedded 8000 Series Processors 33
AMD Ryzen™ 4000 Series Desktop Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded R2000 Series Processors 31
AMD EPYC™ 9004 Series Processors 31
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 31
AMD Ryzen™ Embedded R1000 Series Processors 30
AMD Ryzen™ Embedded 7000 Series Processors 30
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 29
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
AMD EPYC™ Embedded 7003 Series Processors 28
Ryzen™ Series 27
Athlon™ Series 27
AMD EPYC™ 7003 Series Processors 27
AMD EPYC™ 9005 Series Processors 27
3rd Gen AMD EPYC™ Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Ryzen™ 9000 Series Desktop Processors 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
3rd Gen EPYC 26
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics 25
AMD Instinct™ MI300A 24
133 results · Clear filters · Feed
-
Medium 6.9
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS …
-
Medium 5.2
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a spe…
-
Medium 5.2
An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to suppl…
-
Medium 5.2
A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local ac…
-
Medium 5.1
An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a speci…
-
Medium 6.9
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of ser…
-
Medium 5.4
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modificat…
-
Medium 6.4
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double …
-
Medium 5.6
A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access ker…
-
Medium 5.6
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…
-
Medium 5.3
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …
-
Medium 6.8
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially lea…
-
Medium 6.8
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memo…
-
Medium 4.0
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privile…
-
Medium 4.6
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker t…
-
Medium 4.6
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Vir…
-
Medium 6.8
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) t…
-
Medium 4.8
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially …
-
Medium 6.8
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workloa…
-
Medium 5.3
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an in…
-
Medium 4.6
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a mal…
-
Medium 6.9
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with lo…
-
Medium 5.3
Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow …
-
Medium 6.8
A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, …
-
Medium 5.8
An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of a…
-
Medium 6.9
Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a unin…
-
Medium 6.9
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local …
-
Medium 6.9
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer ov…
-
Medium 6.9
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-Af…
-
Medium 4.6
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attac…
-
Medium 5.4
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly pr…
-
Medium 6.3
Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the e…
-
Medium 6.0
Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sen…
-
Medium 5.7
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and pote…
-
Medium 5.9
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing con…
-
Medium 5.9
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with adm…
-
Medium 5.6
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised h…
-
Medium 6.0
Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with acce…
-
Medium 6.3
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously c…
-
Medium 4.6
Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially r…