Versal™ AI Edge Series Gen 2 – Inter-Processor Interrupt Buffer Peripheral Protection Unit Access Violation

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0455| The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit XPPU for the inter-processor interrupt IPI buffers does not block unauthorized access as expected. This allows processors ...

AMD Secure Encrypted Virtualization (SEV) Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-0027| Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass Reverse Map Table RMP protections, potentially impacting...

EDK II Mitigations for Transient Scheduler Attacks (TSA)

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-18448 non-AMD| Insufficient Transient Scheduler Attack TSA mitigations in EDK II could allow a ring-0 attacker to infer residual microarchitectural state left by SMM execution,...

AMD Secure Processor (ASP) Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0436| Insufficient parameter sanitization in the AMD Secure Processor ASP trusted execution environment TEE SPDM driver could allow an attacker to supply malicious input, potentially...

AMD Secure Encrypted Virtualization (SEV) Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0462| Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to potentially redirect access to MMIO memory...

Out-of-Bounds Read of Device Table by IOMMU

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2024-21963| An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor HV pages and potentially cause a host crash leading to loss of availability.| 6....

AMD Embedded SPI Flash Driver Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0470| Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.| 5.6...

AMD Radeon™ Graphics Driver Shader Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-48479| Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of...

AMD UEFI Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-61963| Improper input validation within the AmdPlatformRasSmm driver may allow a privileged attacker to overwrite SMRAM, potentially resulting in arbitrary code execution.| 8.4...

AMD Transient Scheduler Attacks for “Zen 5” Processors

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2024-36350| A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged...

Improper Locking of NBIO Devices Could Allow Privileged Remapping Attacks

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2024-36309| Missing Lock Bit Protection in the Northbridge IO NBIO could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially...

Transient Execution Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0004| A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across...

AMD Power Management FW Denial of Service Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0101| Improper validation of specified quantities in input within AMD Power Management Firmware PMFW could allow a local attacker to pass unsanitized input, potentially resulting in a syst...

Cryptographic Vulnerability in AMD Bootgen

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0460| Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity.| 1.0...

AMD Graphics Vulnerabilities – November 2026

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2024-36313| Improper input validation in the AMD Video Decoder Engine Firmware VCN FW could allow an attacker to craft a specially encoded video that, if processed by the affected firmware...

AMD Secure Encrypted Virtualization (SEV) Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2025-54507| Improper validation of consistency within input in AMD SEV Secure Encrypted Virtualization firmware could allow an attacker with administrative privileges to create multiple RMP...

Vivado™ Lab Solutions Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-0043| Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their privileges, potentially resulting in arbitrary co...

AMD Secure Encrypted Virtualization (SEV) Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-48504| Operation on a resource after expiration or release in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to manipulate metadata pages...

Secure Debug Unlock (SDU) Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-0008| Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock SDU, potentially resulting in unauthorized debug access.| 8.4...

Rowhammer-Induced RMP Corruption in AMD Secure Encrypted Virtualization (SEV)

Affected Products and Mitigation AMD recommends that customers using SEV-SNP keep ECC memory protection enabled...

InstallShield Privilege Escalation Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-4869 non-AMD| https://vulners.com/cve/CVE-2026-4869| https://vulners.com/cve/CVE-2026-4869 Specific CVSS scores may change subject to your implementation. We encourage you to calculat...

AMD Secure Processor (ASP) Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2024-36344| Insufficient parameter sanitization in AMD Secure Processor ASP TEE DrvSys could allow a local attacker with access to the Trusted Execution Environment TEE interface or Trusted...

AMD Ryzen™ and Ryzen™ Embedded Processor Vulnerabilities – November 2026

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-0008| Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock SDU, potentially resulting in unauthorized debug access.| 8.4...

Improper Access Control in Debug Interface May Allow Compromise of RMP-Protected Memory

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2025-54501| Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls, potentially resulting in a loss of SEV-SNP guest memo...

Potential Cross-Core NoC Covert Channels on AMD Zen Processors

Mitigation AMD recommends that software developers employ existing best practices, including constant-time algorithms and, where appropriate, avoiding secret-dependent control flows, to help mitigate this potential vulnerability. Please refer to the white papers in the References section for...

AMD Ryzen™ and Ryzen™ Embedded Integrated Graphics Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2024-36313| Improper input validation in the AMD Video Decoder Engine Firmware VCN FW could allow an attacker to craft a specially encoded video that, if processed by the affected firmware...

AMD SEV Incomplete Cleanup Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-40671| Incomplete cleanup during VMRUN error handling could allow access to a Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP guest register state, potentially resulting ...

AMD RAIDXpert2 Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-28235| Improper address validation in the AMD RAID Configuration Driver could allow an attacker with administrative access to read arbitrary kernel memory, potentially resulting in lo...

AMD EPYC™ and EPYC™ Embedded Series Processors with Integrated Graphics

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2024-36313| Improper input validation in the AMD Video Decoder Engine Firmware VCN FW could allow an attacker to craft a specially encoded video that, if processed by the affected firmware...

IOMMU Improper Exception Handling and SMM Out-of-Bounds Write Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-14968 non-AMD| An out-of-bounds write in TianoCore EDK II’s UefiCpuPkg MmSaveStateReadRegisterByIndex AmdMmSaveState.c allows a local attacker with SMM privileges on AMD platforms where...

AMD Manageability Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-70519| Missing Authentication for Critical Function in AMD Management Console AMC could allow a low-privileged, local attacker to access protected management functionality without...

Contention-Based Side Channels in AMD CPUs

Revisions Revision Date| Description ---|--- 2026-11-04| Initial version...

Pre-boot RCE in EDK II PXE Driver

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description ---|--- CVE-2026-97631 non-AMD| https://vulners.com/cve/CVE-2026-97631...

RCCL Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43598| Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an...

AMD Zynq™ UltraScale+ MPSoC and RFSoC Devices – Secure Boot Bypass via Unbounded DFU Download Requests

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0461| Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download...

AMD Compressonator SDK Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-100493| An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a...

Versal Adaptive SoC – Secure Boot Bypass via Board Modifications and Crafted Boot Image

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0482| In AMD Versal™ Adaptive SoC devices, insufficient boundary checks within the USB boot mode—when enabled via board modifications—allow crafted images to overflow a buffer and...

Versal Adaptive SoC – Secure Boot Bypass via Board Modifications and Crafted Boot Image

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0482| In AMD Versal™ Adaptive SoC devices, insufficient boundary checks within the USB boot mode—when enabled via board modifications—allow crafted images to overflow a buffer and...

AMD Compressonator SDK Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-40652| An out-of-bounds read condition in the AMD Compressonator SDK could allow a local attacker to supply a specially crafted Truevision Graphics Adapter TGA file to a user or an...

AMD Zynq™ UltraScale+ MPSoC and RFSoC Devices – Secure Boot Bypass via Unbounded DFU Download Requests

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0461| Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download...

Physical Memory Fault Injection Attacks on DDR5

Revisions Revision Date| Description ---|--- 2026-09-14| Initial version...

Linux GPU Driver NULL Pointer Dereference

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-43603| A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.| 6.9...

Optical Side-Channel Probing of the Internal Configuration Access Port (ICAP) on AMD 7-Series FPGAs

Revisions Revision Date| Description ---|--- 2026-09-14| Acknowledgement updates 2026-09-02| Initial version...

Scheduler-Contention Side Channel on AMD “Zen” Processors

Revisions Revision Date| Description ---|--- 2026-08-12| Initial publication...

Efficient Symbolic Execution for Reviving Arbitrary Speculative Code Execution

Revisions Revision Date| Description ---|--- 2026-08-12| Initial publication...

SEV Firmware Arbitrary Code Execution

Affected Products and Mitigation AMD recommends updating to the mitigated versions below as a defense-in-depth measure. AMD EPYC™ Series Processors Product| Mitigation| Mitigation Release Date| Platform Info Bit ---|---|---|--- AMD EPYC™ 7003 Series Processors| MilanPI 1.0.0.J1| 2025-12-02|...

AMD Ryzen™ Master Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-54512| A DLL hijacking vulnerability within the AMD Ryzen™ Master installation may allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...

AMD Power Design Manager (PDM) Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-8087| A DLL hijacking vulnerability within AMD Power Design Manager can allow a malicious local attacker to escalate privileges during uninstallation potentially resulting in arbitrar...

Trusted Platform Module (TPM) Reference Code Errata

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-6726 non-AMD| An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a...

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...