AMD Computer Hardware, Processor Manufacturer

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any AMD product.

RSS Feeds for AMD security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in AMD products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by AMD Sorted by Most Security Vulnerabilities since 2018

AMD Radeon Software38 vulnerabilities

AMD Uprof8 vulnerabilities

AMD Ryzen Ai Software4 vulnerabilities

AMD Aim T Manageability Api2 vulnerabilities

AMD Milanpi Firmware2 vulnerabilities

AMD Radeon Pro Software2 vulnerabilities

AMD Athlon Gold 3150ge Firmware1 vulnerability

AMD Athlon Gold Pro 3150g Firmware1 vulnerability

AMD Athlon Gold Pro 3150ge Firmware1 vulnerability

AMD Athlon Pro 300ge Firmware1 vulnerability

AMD Cloud Manageability Service1 vulnerability

AMD Enterprise Driver1 vulnerability

AMD Kria1 vulnerability

AMD Management Console1 vulnerability

AMD Management Plugin For Sccm1 vulnerability

AMD Milanpi Sp3 Firmware1 vulnerability

AMD Provisioning Console1 vulnerability

AMD Radeon Directx 11 Driver Dll1 vulnerability

AMD Radeon Software For Hip1 vulnerability

AMD Zynq1 vulnerability

AMD Ryzen 3 3200g Firmware1 vulnerability

AMD Ryzen 3 3200ge Firmware1 vulnerability

AMD Ryzen 3 3300u Firmware1 vulnerability

AMD Ryzen 3 3300x Firmware1 vulnerability

AMD Ryzen 3 3350u Firmware1 vulnerability

By the Year

In 2026 there have been 95 vulnerabilities in AMD with an average score of 7.1 out of ten. Last year, in 2025 AMD had 41 security vulnerabilities published. That is, 54 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.54.

Year	Vulnerabilities	Average Score
2026	95	7.13
2025	41	6.59
2024	19	6.89
2023	10	6.63
2022	14	6.56
2021	36	6.35
2020	9	6.70

It may take a day or so for new AMD vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent AMD Security Vulnerabilities

CVE	Date	Vulnerability
CVE-2025-54518	May 15, 2026	AMD Zen 2 CPU: Shared cache isolation flaw enables privilege escalation Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.
CVE-2026-0481	May 15, 2026	AMD Device Metrics Exporter Unrestricted IP Binding RCE Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability
CVE-2024-21950	May 15, 2026	AMD RM Firmware OOB Read Vulnerability An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.
CVE-2025-52532	May 15, 2026	CVE-2025-52532: Race Condition in AMD MxGPU-Virtualization Driver A race condition in the MxGPU-Virtualization drivers ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.
CVE-2024-36323	May 15, 2026	AMD VCN-JPEG HW Register Isolation Vulnerability (CVE-2024-36323) Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.
CVE-2024-36333	May 15, 2026	DLL Hijacking in AMD Cleanup Utility Enables Priv Escalation A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVE-2024-36334	May 15, 2026	CVE-2024-36334: Signature Verification Flaw in AMD Radeon RGB Tool Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.
CVE-2026-0427	May 15, 2026	AMD GPU Firmware Improper Cleanup of Shared Register Resources Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.
CVE-2024-36332	May 15, 2026	AMD GPU Register Isolation flaw allows guest VM DOS Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.
CVE-2025-0044	May 15, 2026	AMD PowerMgr Firmware OOB Read Partial Conf/Avail Loss An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.
CVE-2023-31309	May 15, 2026	Improper Validation in AMD PMFW Lets Privileged Attacker Export Malformed Args Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.
CVE-2023-31317	May 15, 2026	AMD Secure Processor ASP buffer overflow enabling arbitrary code exec Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.
CVE-2025-54511	May 15, 2026	Improper Privilege Handling in AMD Secure Processor (ASP) Write Violation Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability.
CVE-2025-54517	May 15, 2026	Out-bounds write in AMDGPU ioctl GET_DIAG_DATA: local privilege escalation Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.
CVE-2025-66660	May 15, 2026	AMD TEE SOC Driver: Bad Param Sanitization in DRV_SOC_CMD_ID_SRIOV Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior.
CVE-2025-66664	May 15, 2026	AMD ASP TEE SOC Driver OOB Read via Malformed SR-IOV Cmd Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, potentially resulting in SOC Driver memory contents exposure or an exception
CVE-2026-0428	May 15, 2026	CVE-2026-0428: TEE SOC Driver Sanitation Flaw Allows Unauthorized Reg Write Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.
CVE-2025-48516	May 15, 2026	AGESA DDR5 PMIC DoS Local Priv Escalation Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module.
CVE-2023-31316	May 15, 2026	AMD Secure Processor Power Save State Flaw VCN Firmware Flow Override Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.
CVE-2022-23826	May 15, 2026	AMD GPU Driver TOCTOU: Register Load Race Condition A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.
CVE-2021-26380	May 15, 2026	AMD Trusted OS (TOS) Driver Could Allow Memory Over-read via Malformed Call A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.
CVE-2025-0040	May 15, 2026	Improper Access Control in JTAG-AXI Interaction Exposes XCD Registers Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or overwrite the contents of cross-chip debug (XCD) registers potentially resulting in loss of data integrity or confidentiality.
CVE-2024-21962	May 15, 2026	AMD RAID Driver Improper Input Validation Enables Privilege Escalation Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
CVE-2025-29935	May 15, 2026	CVE-2025-29935: OOB Write in AMD PMF Enables Elevated Code Exec An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability.
CVE-2025-29944	May 15, 2026	Local Out-Of-Bounds Write in AMD Sensor Fusion Hub Driver A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash
CVE-2025-29938	May 15, 2026	AMD PMF Unchecked Return Value Allows Arbitrary Memory Write An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.
CVE-2025-29937	May 15, 2026	AMD PMF OOB Read Exposes Arbitrary Memory An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality.
CVE-2025-0028	May 15, 2026	AMD PMF unchecked return value allows arbitrary memory read/write An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability.
CVE-2025-29936	May 15, 2026	AMD PMF Improper Input Validation Enables Privilege Escalation (CVE202529936) Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.
CVE-2025-48513	May 15, 2026	AMD PMF Uninitialized Resource Leak Enables Kernel Memory Read Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality or availability.
CVE-2025-52540	May 15, 2026	AMD PMF Driver OOB Write/PrivEsc via Improper Input Validation An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation.
CVE-2025-48520	May 15, 2026	Local Input Validation Bug in AMD PMF Driver Enables OOB Info Disclosure An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds potentially resulting in information disclosure or a crash
CVE-2025-48519	May 15, 2026	AMD PMF Driver Improper Input Validation enabling OOB Priv Esc An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation
CVE-2025-0045	May 15, 2026	AMD ASP PCI Driver Local Buffer Overflow via Improper Input Validation Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial of service
CVE-2026-0432	May 15, 2026	AMD Chipset Driver Dir Perm PrivEsc Enables Code Exec Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
CVE-2025-48521	May 15, 2026	AMD Secure Processor PCI Driver UAF via Improper Input Validation Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.
CVE-2025-48512	May 15, 2026	AMD GPIO Driver: Permissions Flaw Enables Privilege Escalation Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
CVE-2024-36345	May 15, 2026	AMD OverDrive SMM OOB Read via Improper Input Validation Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.
CVE-2026-0438	May 15, 2026	AMD SMM Handler Code Injection Vulnerability A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the systems confidentiality, integrity, and availability.
CVE-2025-62619	May 14, 2026	CVE-2025-62619: Unauth KVM Key Endpoint Exposes Sensitive Keys (AMD) Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.
CVE-2025-62625	May 14, 2026	KVM Key Download Component Privilege Escalation via Token Swap (AMD) Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.
CVE-2025-62628	May 14, 2026	AMD Optional Tools OpenSSL Init DLL Injection (CVE-2025-62628) Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.
CVE-2024-36315	May 13, 2026	AMD CPUs LFENCE Speculation Bypass Disclosure Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
CVE-2025-61972	May 13, 2026	Missing Lock Bit on AMD NBIO Registers Enables Local Privileged Code Execution Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.
CVE-2025-61971	May 13, 2026	Hardware: AMD NBIO Lock Bit Bypass for MMIO Routing Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.
CVE-2025-62627	May 13, 2026	Untrusted Ptr Deref in VMware ESXi Ionic Cloud Driver Enables Kernel Read An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.
CVE-2025-62624	May 13, 2026	Heap Overflow in VMware ESXi Ionic Cloud Driver Enables Priv Escalation A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2025-62623	May 13, 2026	VMware ESXi ionic cloud driver heap overflow A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2025-54505	Apr 27, 2026	AMD CPU Transient Exec: FP Divisor Leak to Local Privileged Attacker A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.
CVE-2025-54502	Apr 16, 2026	AMD APCB SMM Driver PrivEsc via Boot Service Exploit Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.