AMD AMD Ryzen™ AI 300 Series Processors
22 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-36343 | | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of b | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-0044 | | An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial los | MEDIUM 4.8 | 0.1 % | ||
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2024-21962 | | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p | HIGH 8.6 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2024-36345 | | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out | MEDIUM 4.6 | 0.1 % | ||
| CVE-2026-0438 | | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker cou | MEDIUM 5.4 | 0.1 % | ||
| CVE-2025-62619 | | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-62625 | | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2024-36319 | | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causin | MEDIUM 6.3 | 0.1 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2025-48518 | | Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integ | MEDIUM 6.9 | 0.2 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36324 | | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbit | HIGH 8.8 | 0.2 % | ||
| CVE-2024-36310 | | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SM | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-54514 | | Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a | MEDIUM 4.8 | 0.1 % | ||
| CVE-2025-0032 | | Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microco | HIGH 7.2 | 0.2 % | ||
| CVE-2025-0010 | | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden | MEDIUM 6.1 | 0.1 % | ||
| CVE-2024-36342 | | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu | HIGH 8.8 | 0.2 % | ||
| CVE-2024-36326 | | Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, pote | HIGH 8.4 | 0.1 % |