Known vulnerabilities in AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-43603 | A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… | 6.9 Medium | Nov 3, 2026 |
| CVE-2023-20577 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… | 7.4 High | Sep 2, 2026 |
| CVE-2023-20576 | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially… | 7.7 High | Sep 2, 2026 |
| CVE-2025-48516 | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… | 6.9 Medium | May 15, 2026 |
| CVE-2026-0432 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… | 8.5 High | May 15, 2026 |
| CVE-2025-62619 | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the… | 6.3 Medium | May 14, 2026 |
| CVE-2025-62625 | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… | 6.0 Medium | May 14, 2026 |
| CVE-2025-54502 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… | 7.1 High | Apr 16, 2026 |
| CVE-2025-52533 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… | 8.7 High | Feb 12, 2026 |
| CVE-2024-36320 | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading… | 7.0 High | Feb 11, 2026 |
| CVE-2025-29949 | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could… | 4.8 Medium | Feb 10, 2026 |
| CVE-2024-36310 | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds… | 4.6 Medium | Feb 10, 2026 |
| CVE-2025-0010 | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting… | 6.1 Medium | Sep 6, 2025 |
| CVE-2024-36354 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access,… | 7.5 High | Sep 6, 2025 |
| CVE-2024-36352 | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer,… | 8.4 High | Sep 6, 2025 |
| CVE-2024-36342 | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting… | 8.8 High | Sep 6, 2025 |
| CVE-2024-21970 | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to… | 4.4 Medium | Sep 6, 2025 |
| CVE-2024-21947 | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary… | 7.5 High | Sep 6, 2025 |
| CVE-2023-31330 | An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to… | 2.5 Low | Sep 6, 2025 |
| CVE-2021-46750 | Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to… | 3.0 Low | Sep 6, 2025 |
| CVE-2024-21977 | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the… | 3.2 Low | Sep 5, 2025 |
| CVE-2024-36353 | Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over… | 6.5 Medium | Mar 2, 2025 |
| CVE-2023-20578 | A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or… | 7.5 High | Aug 13, 2024 |
| CVE-2023-20518 | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the… | 1.9 Low | Aug 13, 2024 |
| CVE-2022-23817 | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious… | 7.3 High | Aug 13, 2024 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33