AMD

Latest CVEs · RSS

• CVE-2026-43598 2026-10-06 · CVSS 7.7
  Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereferen
• CVE-2026-0461 2026-10-05 · CVSS 7.5
  Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgr
• CVE-2026-0482 2026-10-05 · CVSS 5.4
  In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigge
• CVE-2023-20577 2026-09-02 · CVSS 7.4
  A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary
• CVE-2023-20576 2026-09-02 · CVSS 7.7
  Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege es
• CVE-2023-31308 2026-08-31 · CVSS 3.3
  A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.
• CVE-2023-20511 2026-08-31 · CVSS 6.4
  Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arb
• CVE-2025-54512 2026-08-11 · CVSS 7.0
  A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resultin
• CVE-2026-0465 2026-08-11 · CVSS 5.6
  A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss
• CVE-2025-0046 2026-08-11 · CVSS 7.0
  Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.
• CVE-2025-8087 2026-08-11 · CVSS 7.0
  A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, poten
• CVE-2025-48505 2026-08-11 · CVSS 7.3
  Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potential
• CVE-2025-48506 2026-08-11 · CVSS 7.3
  Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resultin
• CVE-2025-61970 2026-08-11 · CVSS 7.3
  Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resul
• CVE-2025-0041 2026-08-11 · CVSS 7.3
  Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary
• CVE-2026-43606 2026-08-11 · CVSS 7.7
  Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysi
• CVE-2023-20572 2026-06-26 · CVSS 5.6
  An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allo
• CVE-2023-20540 2026-06-26 · CVSS 1.8
  An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allo
• CVE-2026-40677 2026-06-12 · CVSS 7.7
  The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary cod
• CVE-2024-21944 2026-06-10 · CVSS 5.3
  Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compl
• CVE-2026-28237 2026-06-09 · CVSS 6.8
  Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
• CVE-2026-0466 2026-06-09 · CVSS 6.8
  Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in cras
• CVE-2025-54509 2026-06-09 · CVSS 4.0
  Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent access
• CVE-2021-46747 2026-06-01 · CVSS 7.1
  Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (Sy
• CVE-2024-36343 2026-05-19 · CVSS 4.6
  Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write