AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
29 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-36343 | | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of b | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2023-31316 | | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could | HIGH 7.1 | 0.1 % | ||
| CVE-2024-21962 | | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p | HIGH 8.6 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2024-36345 | | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out | MEDIUM 4.6 | 0.1 % | ||
| CVE-2026-0438 | | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker cou | MEDIUM 5.4 | 0.1 % | ||
| CVE-2025-62619 | | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-62625 | | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia | MEDIUM 6.0 | 0.2 % | ||
| CVE-2024-36315 | | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens | MEDIUM 5.7 | 0.1 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36324 | | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbit | HIGH 8.8 | 0.2 % | ||
| CVE-2024-36316 | | The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denia | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-36311 | | A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input valid | MEDIUM 4.6 | 0.1 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2025-0010 | | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden | MEDIUM 6.1 | 0.1 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2024-36352 | | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to a | HIGH 8.4 | 0.1 % | ||
| CVE-2024-36342 | | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu | HIGH 8.8 | 0.2 % | ||
| CVE-2024-21970 | | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti | MEDIUM 4.4 | 0.1 % | ||
| CVE-2024-21947 | | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re | HIGH 7.5 | 0.1 % | ||
| CVE-2023-31330 | | An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memor | LOW 2.5 | 0.1 % | ||
| CVE-2024-21977 | | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot | LOW 3.2 | 0.1 % | ||
| CVE-2024-36353 | | Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potential | MEDIUM 6.5 | 0.2 % |