AMD vulnerabilities
We track 114 vulnerabilities in AMD products across 60+ products. 114 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest AMD vulnerabilities
- 8.8 High severity
Improper input validation in the NPU driver could allow an attacker to supply a specially…
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
- 7.8 High severity
Improper input validation in the NPU driver could allow an attacker to supply a specially…
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
- 7.8 High severity
Improper input validation in the NPU driver could allow an attacker to supply a specially…
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
- 7.3 High severity
AMD Provisioning Console (APC) Software: Incorrect Default Permissions
Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Management Console: Incorrect Default Permissions
Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Ryzen Master Utility for Overclocking…: Incorrect Default Permissions
Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Ryzen™ Master Monitoring SDK: Incorrect Default Permissions
Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.3 High severity
AMD Cloud Manageability Service Software: Incorrect Default Permissions
Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.8 High severity
AMD Management Plug-In for SCCM: Incorrect Default Permissions
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.8 High severity
AMD Software: PRO Edition: Incorrect Default Permissions
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 7.8 High severity
μProf Tool: Incorrect Default Permissions
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 7.8 High severity
μProf Tool: Uncontrolled Search Path Element
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- 10.0 Critical severity
AMD EPYC™ 7003 Series Processors: Improper Initialization
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
- 7.3 High severity
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an…
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.
- 8.2 High severity
AMD Athlon™ 3000 Series Desktop Processors…: Out-of-bounds Write
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
- 7.5 High severity
3rd Gen AMD EPYC™ Processors: Improper Control of Generation of Code
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
- 7.9 High severity
3rd Gen AMD EPYC™ Processors: Out-of-bounds Write
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
- 7.9 High severity
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite…
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.
- 8.2 High severity
AMD Ryzen™ Threadripper™ PRO Processors 5900…: Improper Access Control
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
- 7.1 High severity
3rd Gen AMD EPYC™ Processors: Improper Access Control
Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.
- 7.5 High severity
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to…
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.
- 8.1 High severity
Ryzen™ 5000 Series Desktop Processor with…: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
- 7.8 High severity
Radeon™ RX 5000 Series Graphics Cards: Improper Privilege Management
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.
- 7.8 High severity
Ryzen™ 3000 Series Desktop Processors…: Out-of-bounds Write
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.
- 7.5 High severity
2nd Gen AMD EPYC™: Out-of-bounds Write
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity.
- 9.8 Critical severity
1st Gen AMD EPYC™: Out-of-bounds Write
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.
- 8.8 High severity
Ryzen™ 2000 Series: Insufficient Control Flow Management
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
- 8.8 High severity
Ryzen™ 2000 Series: Always-Incorrect Control Flow Implementation
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
- 7.8 High severity
Ryzen™ Master: Improper Privilege Management
Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentially leading to privilege escalation and code execution by the lower privileged user.
- 7.5 High severity
2nd Gen EPYC: Improper Restriction of Operations within the Bounds of a Memory Buffer
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service.
- 7.5 High severity
2nd Gen EPYC: Improper Restriction of Operations within the Bounds of a Memory Buffer
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.
- 8.8 High severity
Genoa Firmware: Out-of-bounds Write
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses.
- 7.5 High severity
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to…
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.
- 7.5 High severity
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send…
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.