AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")

13 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-29935fixed in 7.06.02.123An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated pHIGH 8.40.1 %
CVE-2025-29944A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resultingMEDIUM 6.80.1 %
CVE-2025-29938fixed in 7.06.02.123An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory addressHIGH 7.10.1 %
CVE-2025-29937fixed in 7.06.02.123An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory loMEDIUM 5.80.1 %
CVE-2025-0028fixed in 7.06.02.123An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary addressHIGH 8.30.1 %
CVE-2025-29936fixed in 7.06.02.123Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentiHIGH 8.40.1 %
CVE-2025-48513fixed in 7.06.02.123Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memoMEDIUM 6.90.1 %
CVE-2025-52540fixed in 7.06.02.123An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write OutHIGH 8.50.1 %
CVE-2025-48520fixed in 7.06.02.123An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-MEDIUM 6.90.1 %
CVE-2025-48519fixed in 7.06.02.123An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or wHIGH 8.50.1 %
CVE-2025-48521Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) conditMEDIUM 6.90.1 %
CVE-2025-48512fixed in 7.04.09.545Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attackHIGH 7.00.1 %
CVE-2025-48503A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting inHIGH 7.80.1 %