AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
40 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20577 | | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res | HIGH 7.4 | 0.2 % | ||
| CVE-2023-20576 | | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of ser | HIGH 7.7 | 0.1 % | ||
| CVE-2023-20572 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | MEDIUM 5.6 | 0.2 % | ||
| CVE-2024-36343 | | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of b | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2023-31316 | | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could | HIGH 7.1 | 0.1 % | ||
| CVE-2024-21962 | | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p | HIGH 8.6 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2024-36345 | | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out | MEDIUM 4.6 | 0.1 % | ||
| CVE-2025-62619 | | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-62625 | | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2025-29949 | | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36310 | | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SM | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-0010 | | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden | MEDIUM 6.1 | 0.1 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2024-36352 | | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to a | HIGH 8.4 | 0.1 % | ||
| CVE-2024-36342 | | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu | HIGH 8.8 | 0.2 % | ||
| CVE-2024-21970 | | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti | MEDIUM 4.4 | 0.1 % | ||
| CVE-2024-21947 | | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re | HIGH 7.5 | 0.1 % | ||
| CVE-2023-31330 | | An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memor | LOW 2.5 | 0.1 % | ||
| CVE-2023-31326 | | Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) drive | LOW 2.8 | 0.1 % | ||
| CVE-2021-46750 | | Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed message | LOW 3.0 | 0.2 % | ||
| CVE-2021-26377 | | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig | MEDIUM 4.1 | 0.2 % | ||
| CVE-2024-21977 | | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot | LOW 3.2 | 0.1 % | ||
| CVE-2024-36353 | | Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potential | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-20578 | | A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify | HIGH 7.5 | 0.1 % | ||
| CVE-2023-20518 | | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell | LOW 1.9 | 0.1 % | ||
| CVE-2022-23817 | | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to | HIGH 7.3 | 0.2 % | ||
| CVE-2021-46772 | | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the struc | LOW 3.9 | 0.2 % | ||
| CVE-2021-46746 | | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26387 | | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell t | LOW 3.9 | 0.1 % | ||
| CVE-2021-26344 | | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to mod | HIGH 8.2 | 0.2 % | ||
| CVE-2023-31315 | | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while S | HIGH 7.5 | 0.6 % | ||
| CVE-2023-20579 | | Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections | MEDIUM 6.0 | 0.2 % |