AMD AMD Ryzen™ Z1 Series Processors
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-48513 | fixed in 7.06.02.123 | Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memo | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-48512 | | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attack | HIGH 7.0 | 0.1 % | ||
| CVE-2026-0438 | | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker cou | MEDIUM 5.4 | 0.1 % | ||
| CVE-2024-36315 | | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sens | MEDIUM 5.7 | 0.1 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2025-0011 | | Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address | LOW 3.3 | 0.2 % |