CVE-2024-21960

Incorrect default permissions in the AMD Optimizing CPU Libraries AOCL installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21960

The CVE-2024-21960 entry concerns the AMD Optimizing CPU Libraries (AOCL). The available connected documents identify the vulnerability as stemming from incorrect default permissions in the AOCL installation directory, which could allow a local attacker with low privileges to escalate privileges ...

CVE-2024-36340

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure...

CVE-2024-36340

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure...

CVE-2024-36340

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure...

CVE-2024-36340

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure...

CVE-2024-36340

AMD uProf exposes CVE-2024-36340 a local junction-point vulnerability that allows a low-privileged attacker to create junction points, potentially triggering arbitrary file deletion or disclosure. The affected software is AMD uProf (tools for performance analysis on Windows, Linux and FreeBSD). R...

kernel: drm/amd/display: Increase array size of dummy_boolean

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs because the dml2coresharedmodesupport and dmlcoremodesupport functions attempt to access an array element beyond its allocated size. A local attacker could potentially exploit this out-of-bounds write,...

kernel: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value

A flaw was found in the Linux kernel's AMD P-State processor frequency driver. A local user could exploit this flaw to cause a Denial of Service DoS by crashing the system. This issue occurs because the driver fails to validate the return value of an internal CPU lookup function, leading to a...

PT-2025-20933 · Amd · Amd Optimizing Cpu Libraries

Name of the Vulnerable Software and Affected Versions: AMD Optimizing CPU Libraries affected versions not specified Description: A DLL hijacking issue in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

PT-2025-20931 · Amd · Aocl

Name of the Vulnerable Software and Affected Versions: AMD Optimizing CPU Libraries AOCL affected versions not specified Description: The issue is related to incorrect default permissions in the AOCL installation directory, which could allow an attacker to achieve privilege escalation, potentiall...

CVE-2024-36339: Incorrect Default Permissions

A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21960: Incorrect Default Permissions

Incorrect default permissions in the AMD Optimizing CPU Libraries AOCL installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2025-0035: Unquoted Search Path or Element

Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2023-31359: Incorrect Default Permissions

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31358: Incorrect Default Permissions

A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-36340: Insecure Operation on Windows Junction / Mount Point

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure...

RHEL 9 : microcode_ctl (RHSA-2025:7043)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7043 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: microcodectl: Improper input validation in...

PT-2025-20929 · Amd · Amd Manageability Api

Name of the Vulnerable Software and Affected Versions: AMD Manageability API affected versions not specified Description: A DLL hijacking issue in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Recommendations:...

Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection

AMD ID: AMD-SB-7030 Potential Impact: N/A Severity: N/A Summary Researchers from ETH Zurich have provided AMD with a paper titled “Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection.” AMD reviewed the paper and believes that this vulnerability does not...