AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
29 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-0044 | | An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial los | MEDIUM 4.8 | 0.1 % | ||
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-0040 | | Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with phys | MEDIUM 5.3 | 0.1 % | ||
| CVE-2024-21962 | | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p | HIGH 8.6 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2024-36345 | | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out | MEDIUM 4.6 | 0.1 % | ||
| CVE-2026-0438 | | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker cou | MEDIUM 5.4 | 0.1 % | ||
| CVE-2025-62619 | | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-62625 | | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2025-48518 | | Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integ | MEDIUM 6.9 | 0.2 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2025-29949 | | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36310 | | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SM | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-0010 | | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-0009 | | A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a sys | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2024-36342 | | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu | HIGH 8.8 | 0.2 % | ||
| CVE-2024-36357 | | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in th | MEDIUM 5.6 | 0.4 % | ||
| CVE-2024-36350 | | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting i | MEDIUM 5.6 | 0.5 % | ||
| CVE-2024-36348 | | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI | LOW 3.8 | 0.3 % | ||
| CVE-2024-36349 | | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote | LOW 3.8 | 0.2 % | ||
| CVE-2024-36347 | | Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malic | MEDIUM 6.4 | 0.1 % | ||
| CVE-2023-31331 | | Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stac | LOW 3.0 | 0.2 % | ||
| CVE-2024-0179 | | SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentia | HIGH 8.2 | 0.2 % | ||
| CVE-2024-21925 | | Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code ex | HIGH 8.2 | 0.2 % |