Vendor
AMD
493 known vulnerabilities.
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 53
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 5000 Series Desktop Processors 49
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 47
AMD EPYC™ 9005 Series Processors 46
AMD Ryzen™ 3000 Series Desktop Processors 45
AMD EPYC™ 9004 Series Processors 44
AMD EPYC™ Embedded 9005 Series Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 42
AMD EPYC™ Embedded 7003 Series Processors 42
AMD EPYC™ 7003 Series Processors 41
AMD Ryzen™ Embedded V2000 Series Processors 39
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 39
AMD Ryzen™ 8000 Series Desktop Processors 37
AMD EPYC™ 8004 Series Processors 35
AMD Ryzen™ Embedded R2000 Series Processors 34
AMD EPYC™ Embedded 8004 Series Processors 34
AMD Ryzen™ Embedded 8000 Series Processors 34
AMD Ryzen™ 4000 Series Desktop Processors 34
AMD Ryzen™ Embedded R1000 Series Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded 7000 Series Processors 31
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 31
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 30
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
Ryzen™ Series 27
Athlon™ Series 27
3rd Gen AMD EPYC™ Processors 27
AMD Ryzen™ 9000 Series Desktop Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
158 results · Clear filters · Feed
-
Medium 4.6
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Vir…
-
Medium 6.8
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) t…
-
Medium 4.8
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially …
-
Medium 6.8
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workloa…
-
Medium 5.3
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an in…
-
Medium 4.6
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a mal…
-
Medium 6.9
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with lo…
-
Medium 5.3
Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow …
-
Medium 6.8
A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, …
-
Medium 5.8
An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of a…
-
Medium 6.9
Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a unin…
-
Medium 6.9
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local …
-
Medium 6.9
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer ov…
-
Medium 6.9
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-Af…
-
Medium 4.6
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attac…
-
Medium 5.4
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly pr…
-
Medium 6.3
Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the e…
-
Medium 6.0
Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sen…
-
Medium 5.7
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and pote…
-
Medium 5.9
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing con…
-
Medium 5.9
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with adm…
-
Medium 5.6
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised h…
-
Medium 6.0
Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with acce…
-
Medium 6.3
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously c…
-
Medium 4.6
Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially r…
-
Medium 6.9
Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resul…
-
Medium 6.0
Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtua…
-
Medium 5.5
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially…
-
Medium 4.6
A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker …
-
Medium 5.4
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SP…
-
Medium 4.8
Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could a…
-
Medium 4.6
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bound…
-
Medium 4.5
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can poten…
-
Medium 4.6
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOC…
-
Medium 4.0
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to …
-
Medium 4.8
Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could p…
-
Medium 5.3
Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resultin…
-
Medium 6.8
Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory coul…
-
Medium 6.9
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reve…
-
Medium 5.9
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss …