Vendor
AMD
493 known vulnerabilities.
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 53
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 5000 Series Desktop Processors 49
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 47
AMD EPYC™ 9005 Series Processors 46
AMD Ryzen™ 3000 Series Desktop Processors 45
AMD EPYC™ 9004 Series Processors 44
AMD EPYC™ Embedded 9005 Series Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 42
AMD EPYC™ Embedded 7003 Series Processors 42
AMD EPYC™ 7003 Series Processors 41
AMD Ryzen™ Embedded V2000 Series Processors 39
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 39
AMD Ryzen™ 8000 Series Desktop Processors 37
AMD EPYC™ 8004 Series Processors 35
AMD Ryzen™ Embedded R2000 Series Processors 34
AMD EPYC™ Embedded 8004 Series Processors 34
AMD Ryzen™ Embedded 8000 Series Processors 34
AMD Ryzen™ 4000 Series Desktop Processors 34
AMD Ryzen™ Embedded R1000 Series Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded 7000 Series Processors 31
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 31
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 30
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
Ryzen™ Series 27
Athlon™ Series 27
3rd Gen AMD EPYC™ Processors 27
AMD Ryzen™ 9000 Series Desktop Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
493 results · Feed
-
Medium 5.5
Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, p…
-
High 7.3
Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achie…
-
High 7.3
Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker t…
-
High 7.3
Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow…
-
High 7.3
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM…
-
High 7.3
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege es…
-
Low 3.3
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially re…
-
High 7.3
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege esca…
-
High 7.3
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulti…
-
High 7.3
Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attack…
-
Medium 4.8
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged…
-
Medium 5.7
Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitra…
-
Medium 4.4
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pot…
-
Medium 5.0
Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed…
-
Low 2.3
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-…
-
Low 2.3
Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to …
-
Low 1.9
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker…
-
Medium 6.5
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, al…
-
Medium 5.3
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an at…
-
High 7.5
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or …
-
Low 1.9
Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BI…
-
Low 3.3
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtu…
-
Low 1.9
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in int…
-
Medium 4.7
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to…
-
Medium 5.2
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid D…
-
High 7.3
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious t…
-
High 7.5
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB …
-
Low 3.9
Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to …
-
Medium 5.2
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged…
-
Low 3.9
Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS…
-
Medium 5.7
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an …
-
High 7.2
An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with acce…
-
High 7.5
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM …
-
High 7.9CVE-2024-21980 Public exploit
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a …
-
Medium 6.0CVE-2024-21978 Public exploit
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially l…
-
Medium 6.0CVE-2023-31355 Public exploit
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC …
-
High 8.2
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to b…
-
Medium 5.3
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with a…
-
Medium 5.3
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with a…
-
Medium 5.7CVE-2024-2193 Public exploit
Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.
A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the …