Skip to content

Vulnerabilities of AMD AMD Ryzen™ 9000HX Series Processors

Is your version affected?

CVE Summary Score Published
CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Medium Nov 3, 2026
CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… 6.9 Medium May 15, 2026
CVE-2024-21962 Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location… 8.6 High May 15, 2026
CVE-2025-0045 Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… 6.9 Medium May 15, 2026
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High May 15, 2026
CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High May 15, 2026
CVE-2026-0438 A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory 5.4 Medium May 15, 2026
CVE-2025-62619 Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the… 6.3 Medium May 14, 2026
CVE-2025-62625 Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… 6.0 Medium May 14, 2026
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High Apr 16, 2026
CVE-2025-54514 Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could… 4.8 Medium Feb 10, 2026
CVE-2025-62626 Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values… 7.2 High Nov 21, 2025
CVE-2025-0032 Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load… 7.2 High Sep 6, 2025
CVE-2024-36353 Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over… 6.5 Medium Mar 2, 2025

Other AMD products