AMD

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 6.9MediumNov 3, 2026AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Memory corruptionCVE-2026-43603A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.
• 5.2MediumNov 3, 2026AMD Compressionator SDK Memory corruptionCVE-2026-40661An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated pipeline, potentially resulting in heap corruption or denial of service (DoS).
• 5.2MediumNov 3, 2026AMD Compressionator SDK Memory corruptionCVE-2026-40660A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash.
• 5.1MediumNov 3, 2026AMD Compressionator SDK Memory corruptionCVE-2026-40659An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file, potentially resulting in denial of service (DoS).
• 5.2MediumNov 3, 2026AMD Compressionator SDK Memory corruptionCVE-2026-40652An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.
• 6.9MediumNov 3, 2026AMD Compressionator SDK Memory corruptionCVE-2026-100493An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process termination or limited disclosure of heap memory.
• 7.7HighOct 6, 2026AMD Instinct™ MI210 Memory corruptionCVE-2026-43598Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.
• 5.4MediumOct 5, 2026AMD Alveo™ Accelerator Cards Memory corruptionCVE-2026-0482In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.
• 7.5HighOct 5, 2026AMD Zynq™ UltraScale+ MPSoCs Memory corruptionCVE-2026-0461Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.
• 5.5MediumJun 9, 2026Amd uprof Denial of serviceCVE-2026-28237Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
• 5.5MediumJun 9, 2026Amd uprof Information disclosureCVE-2026-0466Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
• 8.1HighJun 1, 2026Amd aiter DeserializationCVE-2026-49121AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticated remote attackers to execute arbitrary code by sending a malicious pickle payload to a ZMQ SUB socket with no authentication, HMAC, or format validation. Attackers who can reach the writer XPUB endpoint on the cluster network or supply a forged Handle with an attacker-controlled remote_subscribe_add
• 7.8HighMay 15, 2026Amd radeon software Privilege escalationCVE-2024-36333A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
• 4.6MediumMay 15, 2026AMD EPYC™ 4004 Memory corruptionCVE-2024-36345Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.
• 7.8HighFeb 11, 2026Amd rocmCVE-2023-31324A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.
• 7.8HighFeb 11, 2026Amd rocmCVE-2023-20548A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
• 5.5MediumNov 24, 2025Amd uprof Denial of serviceCVE-2025-48511Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
• 7.1HighNov 24, 2025Amd uprofCVE-2025-48510Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
• 5.5MediumNov 24, 2025Amd uprof Memory corruptionCVE-2025-29933Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service
• 5.5MediumNov 21, 2025Amd uprof Denial of serviceCVE-2025-48502Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
• 6.0MediumSep 6, 2025AMD Instinct™ MI300ACVE-2024-36346Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition.
• 8.8HighSep 6, 2025AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Code / command injectionCVE-2024-36342Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
• 4.4MediumSep 6, 2025AMD Ryzen™ Threadripper™ 3000 ProcessorsCVE-2024-21970Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity.

See every AMD entry on the dashboard.

Top products

• uprof6 CVEs in the last year
• AMD Compressionator SDK5 CVEs in the last year
• rocm2 CVEs in the last year
• Zynq™ UltraScale+ MPSoCs1 CVE in the last year
• radeon software1 CVE in the last year
• AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics1 CVE in the last year
• AMD Instinct™ MI2101 CVE in the last year
• AMD EPYC™ 40041 CVE in the last year
• Alveo™ Accelerator Cards1 CVE in the last year
• aiter1 CVE in the last year