AMD vulnerabilities
We track 114 vulnerabilities in AMD products across 60+ products. 114 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest AMD vulnerabilities
- 8.8 High severity
AMD Ryzen™ 6000 Series Processors with Radeon™…: Out-of-bounds Write
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
- 7.0 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Integer Overflow or Wraparound
Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability
- 7.8 High severity
AMD Radeon™ RX 5000 Series Graphics Products: Time-of-check Time-of-use (TOCTOU) Race Condition
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality,
- 7.8 High severity
AMD Radeon™ RX 5000 Series Graphics Products: Time-of-check Time-of-use (TOCTOU) Race Condition
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
- 8.7 High severity
AMD Radeon™ RX 6000 Series Graphics Products: Improper Handling of Parameters
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution
- 7.3 High severity
AMD Athlon™ 3000 Series Mobile Processors with…: Stack-based Buffer Overflow
A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code execution.
- 7.1 High severity
AMD EPYC™ 9004 Series Processors: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- 7.0 High severity
AMD EPYC™ 9004 Series Processors: Out-of-bounds Write
Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting in arbitrary code execution.
- 8.0 High severity
Xilinx Run Time (XRT): Integer Overflow or Wraparound
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability.
- 7.3 High severity
Xilinx Run Time (XRT): Improper Resource Locking
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability
- 7.3 High severity
Xilinx Run Time (XRT): Stack-based Buffer Overflow
A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface (AXI), potentially resulting in loss of confidentiality, integrity, and/or availability.
- 7.3 High severity
Xilinx Run Time (XRT): Integer Overflow or Wraparound
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial of service.
- 8.6 High severity
Kria™ SOM: Improper Validation of Specified Quantity in Input
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.
- 7.3 High severity
AMD StoreMI™: Untrusted Search Path
Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD StoreMI™: Untrusted Search Path
A DLL hijacking vulnerability in AMD StoreMI™ could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.2 High severity
AMD Ryzen™ 9000HX Series Processors: Improper Handling of Insufficient Entropy in TRNG
Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.
- 8.6 High severity
Kintex™ 7-Series FPGA: Improper Protection Against Voltage and Clock Glitches
Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality.
- 7.2 High severity
AMD EPYC™ 9005 Series Processors: Incomplete Cleanup
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
- 7.5 High severity
AMD Ryzen™ Threadripper™ 3000 Processors: Improper Prevention of Lock Bit Modification
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially re
- 8.4 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Untrusted Pointer Dereference
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service.
- 8.4 High severity
AMD Ryzen™ 7040 Series Mobile Processors with…: Missing Authorization
Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, potentially resulting in a loss of confidentiality and integrity.
- 7.5 High severity
AMD Ryzen™ Threadripper™ 3000 Processors: Insufficient Granularity of Access Control
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
- 7.2 High severity
AMD Ryzen™ 8000 Series Desktop Processors: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity.
- 8.7 High severity
AMD Radeon™ RX 7000 Series Graphics Products: Access of Resource Using Incompatible Type
Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading to a read or write to shared memory resulting in loss of confidentiality, integ
- 7.9 High severity
AMD EPYC™ 7002 Series Processors: Improper Access Control for Register Interface
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity
- 7.8 High severity
AIM-T Manageability API: Incorrect Default Permissions
Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.8 High severity
AIM-T Manageability API: Uncontrolled Search Path Element
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Cloud Manageability Service: Unquoted Search Path or Element
Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Optimizing CPU Libraries (AOCL): Incorrect Default Permissions
A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.3 High severity
AIM-T Manageability Service: Unquoted Search Path or Element
Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Optimizing CPU Libraries (AOCL): Incorrect Default Permissions
Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Ryzen™ AI Software: Incorrect Default Permissions
Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.9 High severity
AMD Ryzen™ AI Software: Integer Overflow or Wraparound
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability.
- 7.9 High severity
AMD Ryzen™ AI Software: Integer Overflow or Wraparound
Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability.
- 8.2 High severity
AMD EPYC™ 7002 Processors: Execution with Unnecessary Privileges
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.
- 8.2 High severity
SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally…
SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Ryzen™ Master Utility: Improper Privilege Management
A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.3 High severity
AIM-T (AMD Integrated Management Technology)…: Uncontrolled Search Path Element
A DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.3 High severity
AIM-T(AMD Integrated Management Technology)…: Incorrect Default Permissions
Incorrect default permissions in the AMD Integrated Management Technology (AIM-T) Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.2 High severity
AMD EPYC™ 7001 Series: Improper Verification of Cryptographic Signature
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.