https://vulnogram.org/ Most recent CVEs assigned by Advanced Micro Devices Inc. (amd). https://vulnogram.org/seaview/icons/amd.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-43598 https://vulnogram.org/CVE-2026-43598 Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution. High Tue, 06 Oct 2026 20:06:56 GMT https://vulnogram.org/CVE-2026-0461 https://vulnogram.org/CVE-2026-0461 Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potential… High Mon, 05 Oct 2026 21:38:01 GMT https://vulnogram.org/CVE-2026-0482 https://vulnogram.org/CVE-2026-0482 In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrar… Medium Mon, 05 Oct 2026 21:35:24 GMT https://vulnogram.org/CVE-2023-20577 https://vulnogram.org/CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution. High Wed, 02 Sep 2026 19:57:10 GMT https://vulnogram.org/CVE-2023-20576 https://vulnogram.org/CVE-2023-20576 Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation. High Wed, 02 Sep 2026 19:42:04 GMT https://vulnogram.org/CVE-2023-31308 https://vulnogram.org/CVE-2023-31308 A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read. Low Mon, 31 Aug 2026 18:24:10 GMT https://vulnogram.org/CVE-2023-20511 https://vulnogram.org/CVE-2023-20511 Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution. Medium Mon, 31 Aug 2026 18:15:06 GMT https://vulnogram.org/CVE-2025-54512 https://vulnogram.org/CVE-2025-54512 A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution. High Tue, 11 Aug 2026 17:15:28 GMT https://vulnogram.org/CVE-2026-0465 https://vulnogram.org/CVE-2026-0465 A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability Medium Tue, 11 Aug 2026 17:11:03 GMT https://vulnogram.org/CVE-2025-0046 https://vulnogram.org/CVE-2025-0046 Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution. High Tue, 11 Aug 2026 17:09:39 GMT https://vulnogram.org/CVE-2025-8087 https://vulnogram.org/CVE-2025-8087 A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution. High Tue, 11 Aug 2026 17:09:08 GMT https://vulnogram.org/CVE-2025-48505 https://vulnogram.org/CVE-2025-48505 Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution. High Tue, 11 Aug 2026 17:05:12 GMT https://vulnogram.org/CVE-2025-48506 https://vulnogram.org/CVE-2025-48506 Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution. High Tue, 11 Aug 2026 17:02:43 GMT https://vulnogram.org/CVE-2025-61970 https://vulnogram.org/CVE-2025-61970 Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking. High Tue, 11 Aug 2026 17:00:01 GMT https://vulnogram.org/CVE-2025-0041 https://vulnogram.org/CVE-2025-0041 Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution. High Tue, 11 Aug 2026 16:51:07 GMT https://vulnogram.org/CVE-2026-43606 https://vulnogram.org/CVE-2026-43606 Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity im… High Tue, 11 Aug 2026 16:49:12 GMT https://vulnogram.org/CVE-2023-20572 https://vulnogram.org/CVE-2023-20572 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity. Medium Fri, 26 Jun 2026 15:53:38 GMT https://vulnogram.org/CVE-2023-20540 https://vulnogram.org/CVE-2023-20540 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity. Low Fri, 26 Jun 2026 15:44:59 GMT https://vulnogram.org/CVE-2026-40677 https://vulnogram.org/CVE-2026-40677 The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution. High Network Exploitable Fri, 12 Jun 2026 14:29:55 GMT https://vulnogram.org/CVE-2024-21944 https://vulnogram.org/CVE-2024-21944 Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite gue… Medium Wed, 10 Jun 2026 21:54:19 GMT https://vulnogram.org/CVE-2026-28237 https://vulnogram.org/CVE-2026-28237 Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability. Medium Tue, 09 Jun 2026 17:34:30 GMT https://vulnogram.org/CVE-2026-0466 https://vulnogram.org/CVE-2026-0466 Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service. Medium Tue, 09 Jun 2026 17:33:58 GMT https://vulnogram.org/CVE-2025-54509 https://vulnogram.org/CVE-2025-54509 Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity. Medium Tue, 09 Jun 2026 17:22:26 GMT https://vulnogram.org/CVE-2021-46747 https://vulnogram.org/CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges. High Mon, 01 Jun 2026 19:01:27 GMT https://vulnogram.org/CVE-2024-36343 https://vulnogram.org/CVE-2024-36343 Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially result… Medium Tue, 19 May 2026 21:03:09 GMT https://vulnogram.org/CVE-2025-54518 https://vulnogram.org/CVE-2025-54518 Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation. High Fri, 15 May 2026 03:06:30 GMT https://vulnogram.org/CVE-2026-0481 https://vulnogram.org/CVE-2026-0481 Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability Critical Network Exploitable Fri, 15 May 2026 03:04:56 GMT https://vulnogram.org/CVE-2024-21950 https://vulnogram.org/CVE-2024-21950 An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability. Low Fri, 15 May 2026 03:00:25 GMT https://vulnogram.org/CVE-2025-52532 https://vulnogram.org/CVE-2025-52532 A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, poten… Low Fri, 15 May 2026 02:59:46 GMT https://vulnogram.org/CVE-2024-36323 https://vulnogram.org/CVE-2024-36323 Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/w… High Fri, 15 May 2026 02:59:08 GMT https://vulnogram.org/CVE-2024-36333 https://vulnogram.org/CVE-2024-36333 A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. High Fri, 15 May 2026 02:58:47 GMT https://vulnogram.org/CVE-2024-36334 https://vulnogram.org/CVE-2024-36334 Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution. High Fri, 15 May 2026 02:58:23 GMT https://vulnogram.org/CVE-2026-0427 https://vulnogram.org/CVE-2026-0427 Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, int… Medium Fri, 15 May 2026 02:51:22 GMT https://vulnogram.org/CVE-2024-36332 https://vulnogram.org/CVE-2024-36332 Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and cr… Medium Fri, 15 May 2026 02:51:02 GMT https://vulnogram.org/CVE-2025-0044 https://vulnogram.org/CVE-2025-0044 An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability. Medium Fri, 15 May 2026 02:49:13 GMT https://vulnogram.org/CVE-2023-31309 https://vulnogram.org/CVE-2023-31309 Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability. Medium Fri, 15 May 2026 02:48:10 GMT https://vulnogram.org/CVE-2023-31317 https://vulnogram.org/CVE-2023-31317 Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution. High Fri, 15 May 2026 02:47:12 GMT https://vulnogram.org/CVE-2025-54511 https://vulnogram.org/CVE-2025-54511 Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of av… Medium Fri, 15 May 2026 02:45:21 GMT https://vulnogram.org/CVE-2025-54517 https://vulnogram.org/CVE-2025-54517 Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. High Fri, 15 May 2026 02:44:54 GMT https://vulnogram.org/CVE-2025-66660 https://vulnogram.org/CVE-2025-66660 Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior. Low Fri, 15 May 2026 02:42:33 GMT https://vulnogram.org/CVE-2025-66664 https://vulnogram.org/CVE-2025-66664 Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory content… Medium Fri, 15 May 2026 02:41:56 GMT https://vulnogram.org/CVE-2026-0428 https://vulnogram.org/CVE-2026-0428 Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior. Low Fri, 15 May 2026 02:41:13 GMT https://vulnogram.org/CVE-2025-48516 https://vulnogram.org/CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrit… Medium Fri, 15 May 2026 02:37:49 GMT https://vulnogram.org/CVE-2023-31316 https://vulnogram.org/CVE-2023-31316 Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution fl… High Fri, 15 May 2026 02:36:10 GMT https://vulnogram.org/CVE-2022-23826 https://vulnogram.org/CVE-2022-23826 A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity. Low Fri, 15 May 2026 02:30:16 GMT https://vulnogram.org/CVE-2021-26380 https://vulnogram.org/CVE-2021-26380 A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity. Low Fri, 15 May 2026 02:25:20 GMT https://vulnogram.org/CVE-2025-0040 https://vulnogram.org/CVE-2025-0040 Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in los… Medium Fri, 15 May 2026 02:09:35 GMT https://vulnogram.org/CVE-2024-21962 https://vulnogram.org/CVE-2024-21962 Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution. High Fri, 15 May 2026 01:59:01 GMT https://vulnogram.org/CVE-2025-29935 https://vulnogram.org/CVE-2025-29935 An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability. High Fri, 15 May 2026 01:53:42 GMT https://vulnogram.org/CVE-2025-29944 https://vulnogram.org/CVE-2025-29944 A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash Medium Fri, 15 May 2026 01:53:28 GMT