Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

AMD AMD Ryzenâ„¢ 7035 Series Processors with Radeonâ„¢ Graphics (formerly codenamed "Rembrandt R")

CVE-2025-29937
MEDIUM 5.8

At a glance

Source
NVD
EPSS
EPSS 0.10 % · percentile 1 ()
State
PUBLISHED
Published
Updated
Assigner
AMD
NVD status
Awaiting Analysis

Search on…

Description

An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality.

Weaknesses (CWE)

  • CWE-125 — Out-of-bounds Read

References

Scores

VersionScoreVectorScored by
CVSS 4.0MEDIUM 5.8CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:NAMD
CVSS 4.0MEDIUM 5.8CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · psirt@amd.com (Secondary)

European references

Affected products

ProductVersions
AMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")unaffected 7.06.02.123
AMD · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")unaffected 7.06.02.123
AMD · AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")unaffected 7.06.02.123
AMD · AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")unaffected 7.06.02.123
AMD · AMD Ryzen™ Embedded 8000 Series Processorsunaffected amd_chipset_software_7.06.02.123.exe

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD