amd Vulnerability Advisory Catalog

Total 274 security vulnerabilities recorded for amd software and firmware.

← Back to All Vendors
Component: epyc_7232p

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a mal...

📅 2021-05-13
CVSS 7.2 Dossier →
Component: vbios_flash_tool_software_development_kit

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT...

📅 2020-11-12
CVSS 7.8 Dossier →
Component: trusted_platform_modules_reference

The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in ...

📅 2020-11-12
CVSS 6.4 Dossier →
Component: energy_driver_for_linux

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL...

📅 2020-11-12
CVSS 5.5 Dossier →
Component: atikmdag.sys

A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially c...

📅 2020-10-13
CVSS 5.5 Dossier →
Component: ryzen_master

A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority sys...

📅 2020-10-13
CVSS 7.8 Dossier →
Component: atikmdag.sys

A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A s...

📅 2020-10-13
CVSS 5.5 Dossier →
CVE-2020-6103 CRITICAL
Component: radeon_directx_11_driver_atidxx64.dll

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An atta...

📅 2020-07-20
CVSS 9.9 Dossier →
CVE-2020-6102 CRITICAL
Component: radeon_directx_11_driver_atidxx64.dll

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An atta...

📅 2020-07-20
CVSS 9.9 Dossier →
CVE-2020-6101 CRITICAL
Component: radeon_directx_11_driver_atidxx64.dll

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An atta...

📅 2020-07-20
CVSS 9.9 Dossier →
CVE-2020-6100 CRITICAL
Component: radeon_directx_11_driver_atidxx64.dll

An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can caus...

📅 2020-07-20
CVSS 9.9 Dossier →
CVE-2019-7247 CRITICAL
Component: overdrive

An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not proper...

📅 2020-05-18
CVSS 9.8 Dossier →
CVE-2019-7246 MEDIUM
Component: atillk64

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a...

📅 2020-05-18
CVSS 6.7 Dossier →
Component: atillk64

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map...

📅 2020-04-27
CVSS 8.8 Dossier →
Component: user_experience_program

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted ...

📅 2020-02-12
CVSS 7.8 Dossier →
CVE-2019-5183 CRITICAL
Component: atidxx64

An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A ...

📅 2020-01-25
CVSS 9.0 Dossier →
Component: atidxx64

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can caus...

📅 2020-01-25
CVSS 8.6 Dossier →
Component: atidxx64

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A specially crafted pixel shader can cau...

📅 2020-01-25
CVSS 8.6 Dossier →
Component: atidxx64

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can cau...

📅 2020-01-25
CVSS 8.6 Dossier →
CVE-2019-5049 CRITICAL
Component: radeon_rx_550_firmware

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted ...

📅 2019-10-31
CVSS 10.0 Dossier →
CVE-2019-5478 MEDIUM
Component: zu11eg_firmware

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of...

📅 2019-09-03
CVSS 5.5 Dossier →
CVE-2019-9836 MEDIUM
Component: secure_encrypted_virtualization_firmware

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build...

📅 2019-06-25
CVSS 5.3 Dossier →
CVE-2018-8936 CRITICAL
Component: ryzen_mobile_firmware

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation....

📅 2018-03-22
CVSS 9.0 Dossier →
CVE-2018-8935 CRITICAL
Component: ryzen_pro_firmware

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW....

📅 2018-03-22
CVSS 9.0 Dossier →
Page 11 of 12 (274 Total Records)