43 matches found
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2025-8087
CVE-2025-8087 describes a DLL hijacking vulnerability in AMD Power Design Manager. The issue allows a malicious local attacker to escalate privileges during the uninstallation process, potentially enabling arbitrary code execution. Affected component is AMD Power Design Manager; root cause is DLL...
EUVD-2025-210695
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
AMD Power Design Manager (PDM) Vulnerabilities
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-8087| A DLL hijacking vulnerability within AMD Power Design Manager can allow a malicious local attacker to escalate privileges during uninstallation potentially resulting in arbitrar...
CVE-2025-8087: Uncontrolled Search Path Element
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
PT-2026-70364
Name of the Vulnerable Software and Affected Versions AMD Power Design Manager affected versions not specified Description A DLL hijacking issue exists where a local attacker can escalate privileges during the uninstallation process. This could lead to arbitrary code execution. DLL hijacking is a...
CLSA-2026-1779434490 kernel: Fix of 100 CVEs
tracing: Verify event formats that have "%p.." CVE-2025-37938 - HID: pidff: Fix null pointer dereference in pidfffindfields CVE-2025-37862 - scsi: st: Fix array overflow in stsetup CVE-2025-37857 - drm/amdkfd: debugfs hanghws skip GPU with MES CVE-2025-37853 - mm/vmscan: don't try to reclaim...
CVE-2023-31313
An unintended proxy or intermediary in the AMD power management firmware PMFW could allow a privileged attacker to send malformed messages to the system management unit SMU potentially resulting in arbitrary code execution...
CVE-2023-31313
An unintended proxy or intermediary in the AMD power management firmware PMFW could allow a privileged attacker to send malformed messages to the system management unit SMU potentially resulting in arbitrary code execution...
CVE-2023-31313: Unintended Proxy or Intermediary
An unintended proxy or intermediary in the AMD power management firmware PMFW could allow a privileged attacker to send malformed messages to the system management unit SMU potentially resulting in arbitrary code execution...
CVE-2025-68334 platform/x86/amd/pmc: Add support for Van Gogh SoC
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh SoC The ROG Xbox Ally non-X SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 s2idle causes a crash, this support was dropped by the Xbox Ally...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989064)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989064 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in siparsepowertable In function siparsepowertable, array...
EUVD-2022-55247
Malicious code in bioql PyPI...
CVE-2024-36346
Improper input validation in AMD Power Management Firmware PMFW could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition...
CVE-2024-36346
Improper input validation in AMD Power Management Firmware PMFW could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition...
PT-2025-36388
Name of the Vulnerable Software and Affected Versions: AMD Power Management Firmware PMFW affected versions not specified Description: Improper input validation in AMD Power Management Firmware PMFW could allow a privileged attacker from a Guest VM to send arbitrary input data, potentially causin...
CVE-2024-21970: Improper Validation of Array Index
Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity...
CVE-2024-36346: Improper Validation of Specified Quantity in Input
Improper input validation in AMD Power Management Firmware PMFW could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition...