amd Vulnerability Advisory Catalog

Total 274 security vulnerabilities recorded for amd software and firmware.

← Back to All Vendors
Component: uprof

Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability....

๐Ÿ“… 2026-06-09
CVSS 5.5 Dossier →
CVE-2026-0466 MEDIUM
Component: uprof

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulti...

๐Ÿ“… 2026-06-09
CVSS 5.5 Dossier →
Component: aiter

AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function w...

๐Ÿ“… 2026-06-01
CVSS 8.1 Dossier →
Component: radeon_software

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary co...

๐Ÿ“… 2026-05-15
CVSS 7.8 Dossier →
Component: rocm

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interco...

๐Ÿ“… 2026-02-11
CVSS 7.8 Dossier →
Component: rocm

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of i...

๐Ÿ“… 2026-02-11
CVSS 7.8 Dossier →
Component: uprof

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or den...

๐Ÿ“… 2025-11-24
CVSS 5.5 Dossier →
Component: uprof

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability....

๐Ÿ“… 2025-11-24
CVSS 7.1 Dossier →
Component: uprof

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service...

๐Ÿ“… 2025-11-24
CVSS 5.5 Dossier →
Component: uprof

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service....

๐Ÿ“… 2025-11-21
CVSS 5.5 Dossier →
Component: aim-t_manageability_api

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary...

๐Ÿ“… 2025-05-13
CVSS 7.3 Dossier →
Component: aim-t_manageability_api

A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary...

๐Ÿ“… 2025-05-13
CVSS 7.3 Dossier →
Component: uprof

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitra...

๐Ÿ“… 2025-05-13
CVSS 6.6 Dossier →
Component: ryzen_ai_software

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execut...

๐Ÿ“… 2024-11-12
CVSS 8.8 Dossier →
Component: ryzen_ai_software

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execut...

๐Ÿ“… 2024-11-12
CVSS 8.8 Dossier →
Component: provisioning_console

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentia...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: management_console

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: ryzen_ai_software

Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system cr...

๐Ÿ“… 2024-11-12
CVSS 5.5 Dossier →
Component: ryzen_master_utility_for_overclocking_control

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potenti...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: ryzen_master_monitoring_software_development_kit

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation ...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: cloud_manageability_service

Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privile...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: management_plugin_for_sccm

Incorrect default permissions in the AMD Management Plugin for the Microsoftยฎ System Center Configuration Manager (SCCM) installation directory could ...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: radeon_software

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting ...

๐Ÿ“… 2024-11-12
CVSS 7.3 Dossier →
Component: uprof

Improper input validation in AMD ฮผProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service....

๐Ÿ“… 2024-08-13
CVSS 3.3 Dossier →
Page 1 of 12 (274 Total Records)