AMD AMD Ryzen™ Embedded 8000 Series Processors
32 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-36343 | | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of b | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-0044 | | An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial los | MEDIUM 4.8 | 0.1 % | ||
| CVE-2025-0040 | | Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with phys | MEDIUM 5.3 | 0.1 % | ||
| CVE-2025-29944 | | A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting | MEDIUM 6.8 | 0.1 % | ||
| CVE-2025-29937 | | An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory lo | MEDIUM 5.8 | 0.1 % | ||
| CVE-2025-0028 | | An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address | HIGH 8.3 | 0.1 % | ||
| CVE-2025-29936 | | Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potenti | HIGH 8.4 | 0.1 % | ||
| CVE-2025-48513 | | Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memo | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-52540 | | An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out | HIGH 8.5 | 0.1 % | ||
| CVE-2025-48520 | | An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out- | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-48519 | | An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or w | HIGH 8.5 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2025-48521 | | Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condit | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-48512 | | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attack | HIGH 7.0 | 0.1 % | ||
| CVE-2024-36345 | | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out | MEDIUM 4.6 | 0.1 % | ||
| CVE-2026-0438 | | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker cou | MEDIUM 5.4 | 0.1 % | ||
| CVE-2024-36315 | | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens | MEDIUM 5.7 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2024-36319 | | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causin | MEDIUM 6.3 | 0.1 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2025-48518 | | Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integ | MEDIUM 6.9 | 0.2 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36324 | | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbit | HIGH 8.8 | 0.2 % | ||
| CVE-2024-36316 | | The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denia | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-29949 | | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36310 | | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SM | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-0011 | | Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address | LOW 3.3 | 0.2 % | ||
| CVE-2025-0009 | | A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a sys | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-21977 | | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot | LOW 3.2 | 0.1 % |