Known vulnerabilities in AMD Ryzen™ Embedded 7000 Series Processors
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-36343 | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to… | 4.6 Medium | May 19, 2026 |
| CVE-2025-29944 | A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds,… | 6.8 Medium | May 15, 2026 |
| CVE-2025-0045 | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… | 6.9 Medium | May 15, 2026 |
| CVE-2026-0432 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… | 8.5 High | May 15, 2026 |
| CVE-2025-48521 | Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a… | 6.9 Medium | May 15, 2026 |
| CVE-2025-48512 | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… | 7.0 High | May 15, 2026 |
| CVE-2024-36345 | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged… | 4.6 Medium | May 15, 2026 |
| CVE-2026-0438 | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory | 5.4 Medium | May 15, 2026 |
| CVE-2024-36315 | Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and… | 5.7 Medium | May 13, 2026 |
| CVE-2025-54502 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… | 7.1 High | Apr 16, 2026 |
| CVE-2023-31364 | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… | 8.3 High | Feb 26, 2026 |
| CVE-2024-21961 | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with… | 6.0 Medium | Feb 12, 2026 |
| CVE-2024-36319 | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously… | 6.3 Medium | Feb 12, 2026 |
| CVE-2025-52533 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… | 8.7 High | Feb 12, 2026 |
| CVE-2024-36320 | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading… | 7.0 High | Feb 11, 2026 |
| CVE-2024-36324 | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer,… | 8.8 High | Feb 11, 2026 |
| CVE-2024-36316 | The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks… | 5.5 Medium | Feb 11, 2026 |
| CVE-2024-36311 | A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker… | 4.6 Medium | Feb 10, 2026 |
| CVE-2024-36355 | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify… | 7.0 High | Feb 10, 2026 |
| CVE-2025-0011 | Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to… | 3.3 Low | Sep 6, 2025 |
| CVE-2025-0009 | A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file… | 5.5 Medium | Sep 6, 2025 |
| CVE-2024-36354 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access,… | 7.5 High | Sep 6, 2025 |
| CVE-2024-36342 | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting… | 8.8 High | Sep 6, 2025 |
| CVE-2024-21970 | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to… | 4.4 Medium | Sep 6, 2025 |
| CVE-2024-21977 | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the… | 3.2 Low | Sep 5, 2025 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33