Vulnerability-Lookup

WID-SEC-W-2026-1697

Vulnerability from csaf_certbund - Published: 2026-05-27 22:00 - Updated: 2026-06-16 22:00

Summary

AMD Chipsätze: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Radeon bezeichnet eine Familie von Grafikkarten von AMD.

Angriff: Ein Angreifer kann mehrere Schwachstellen in AMD Chipsätzen wie Radeon und Ryzen ausnutzen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.

Betroffene Betriebssysteme: - BIOS/Firmware

CVE-2021-26380

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2021-46747

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2022-23817

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2022-23826

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2023-31309

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2023-31316

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2023-31317

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2024-21950

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2024-36323

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2024-36332

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2024-36333

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2024-363331

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2024-36334

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-0040

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-0044

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-52532

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-54511

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-54517

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-66660

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2025-66664

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2026-0427

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

CVE-2026-0428

Affected products

Known affected 5 products

Product	Identifier	Version
AMD Radeon PRO Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:pro_graphics_cards`	PRO Graphics Cards
HP Computer HP	`cpe:/h:hp:computer:-`	—
AMD Prozessor Ryzen Embedded Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_embedded_series`	Ryzen Embedded Series
AMD Prozessor Ryzen Series AMD / Prozessor	`cpe:/h:amd:amd_processor:ryzen_series`	Ryzen Series
AMD Radeon Graphics Cards AMD / Radeon	`cpe:/h:amd:radeon:graphics_cards`	Graphics Cards

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.amd.com/en/resources/product-security…	external
https://support.hp.com/de-de/document/ish_1514274…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Radeon bezeichnet eine Familie von Grafikkarten von AMD.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in AMD Chips\u00e4tzen wie Radeon und Ryzen ausnutzen, um Daten zu manipulieren, um seine Privilegien zu erh\u00f6hen, um beliebigen Programmcode auszuf\u00fchren, um einen Denial of Service Angriff durchzuf\u00fchren, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1697 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1697.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1697 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1697"
      },
      {
        "category": "external",
        "summary": "AMD Security Bulletin amd-sb-6027 vom 2026-05-27",
        "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin HPSBHF04127 vom 2026-06-12",
        "url": "https://support.hp.com/de-de/document/ish_15142748-15143245-16/HPSBHF04127"
      }
    ],
    "source_lang": "en-US",
    "title": "AMD Chips\u00e4tze: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-16T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-17T08:39:58.186+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1697",
      "initial_release_date": "2026-05-27T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-05-27T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-06-01T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2021-34843"
        },
        {
          "date": "2026-06-16T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von HP aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Ryzen Series",
                "product": {
                  "name": "AMD Prozessor Ryzen Series",
                  "product_id": "T054775",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:ryzen_series"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Ryzen Embedded Series",
                "product": {
                  "name": "AMD Prozessor Ryzen Embedded Series",
                  "product_id": "T054776",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:ryzen_embedded_series"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Prozessor"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "PRO Graphics Cards",
                "product": {
                  "name": "AMD Radeon PRO Graphics Cards",
                  "product_id": "T054772",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:radeon:pro_graphics_cards"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Graphics Cards",
                "product": {
                  "name": "AMD Radeon Graphics Cards",
                  "product_id": "T054774",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:radeon:graphics_cards"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Radeon"
          }
        ],
        "category": "vendor",
        "name": "AMD"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HP Computer",
            "product": {
              "name": "HP Computer",
              "product_id": "T048140",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HP"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-26380",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2021-26380"
    },
    {
      "cve": "CVE-2021-46747",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2021-46747"
    },
    {
      "cve": "CVE-2022-23817",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2022-23817"
    },
    {
      "cve": "CVE-2022-23826",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2022-23826"
    },
    {
      "cve": "CVE-2023-31309",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2023-31309"
    },
    {
      "cve": "CVE-2023-31316",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2023-31316"
    },
    {
      "cve": "CVE-2023-31317",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2023-31317"
    },
    {
      "cve": "CVE-2024-21950",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2024-21950"
    },
    {
      "cve": "CVE-2024-36323",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2024-36323"
    },
    {
      "cve": "CVE-2024-36332",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2024-36332"
    },
    {
      "cve": "CVE-2024-36333",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2024-36333"
    },
    {
      "cve": "CVE-2024-363331",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2024-363331"
    },
    {
      "cve": "CVE-2024-36334",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2024-36334"
    },
    {
      "cve": "CVE-2025-0040",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-0040"
    },
    {
      "cve": "CVE-2025-0044",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-0044"
    },
    {
      "cve": "CVE-2025-52532",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-52532"
    },
    {
      "cve": "CVE-2025-54511",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-54511"
    },
    {
      "cve": "CVE-2025-54517",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-54517"
    },
    {
      "cve": "CVE-2025-66660",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-66660"
    },
    {
      "cve": "CVE-2025-66664",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2025-66664"
    },
    {
      "cve": "CVE-2026-0427",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2026-0427"
    },
    {
      "cve": "CVE-2026-0428",
      "product_status": {
        "known_affected": [
          "T054772",
          "T048140",
          "T054776",
          "T054775",
          "T054774"
        ]
      },
      "release_date": "2026-05-27T22:00:00.000+00:00",
      "title": "CVE-2026-0428"
    }
  ]
}

CVE-2021-26380 (GCVE-0-2021-26380)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:25 – Updated: 2026-05-15 13:21

Summary

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

Severity

1.8 (Low)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

AMD

References

2 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…

Impacted products

28 products

Vendor	Product	Version
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 PI 1.2.0.5
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.2
AMD	AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.0.6
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.0.6
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4PI 1.0.0.9/ ComboAM4 V2 PI 1.2.0.8
AMD	AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 PI 1.2.0.8
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.7
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Unaffected: ComboAM4v2 PI 1.2.0.5
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4 V2 PI 1.2.0.8
AMD	AMD Ryzen™ Embedded R1000 Series Processors	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded R2000 Series Processors	Unaffected: EmbeddedR2KPI-FP5_1.0.0.2
AMD	AMD Ryzen™ Embedded 5000 Series Processors	Unaffected: EmbAM4PI 1.0.0.2
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	Unaffected: 120A
AMD	AMD Ryzen™ Embedded V2000 Series Processors	Unaffected: EmbeddedPI-FP6_1.0.0.6
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Unaffected: EmbeddedPI-FP7r2_0080
AMD	AMD Radeon™ RX 5000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.10.2 (25.10.33.02 RDNA1/RDNA2)
AMD	AMD Radeon™ PRO W5000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.10.2 (25.10.33.02 RDNA1/RDNA2)
AMD	AMD Radeon™ RX Vega Series Graphics Cards	Unaffected: AMD Software: Adrenalin Edition 25.8.1 (23.19.23.11 pre-RDNA)
AMD	AMD Radeon™ VII	Unaffected: AMD Software: Adrenalin Edition 25.8.1 (23.19.23.11 pre-RDNA)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
AMD	AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards	Unaffected: AMD Software: PRO Edition 25.Q3 (23.19.23.11 pre-RDNA)
AMD	AMD Radeon™ PRO VII	Unaffected: AMD Software: PRO Edition 25.Q3 (23.19.23.11 pre-RDNA)
AMD	AMD Radeon™ Instinct™ MI25	Unaffected: Contact your AMD Customer Engineering representative
AMD	AMD Radeon™ PRO V520	Unaffected: Contact your AMD Customer Engineering representative
AMD	AMD Radeon™ PRO V620	Unaffected: Contact your AMD Customer Engineering representative

Date Public

2026-05-15 02:24

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-26380",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T13:21:27.869059Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T13:21:36.142Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7030 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.9/ ComboAM4 V2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4 V2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPI-FP5_1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI 1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Picasso\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "120A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6_1.0.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP7r2_0080"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.10.2 (25.10.33.02 RDNA1/RDNA2)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.10.2 (25.10.33.02 RDNA1/RDNA2)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX Vega Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.8.1 (23.19.23.11 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 VII",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.8.1 (23.19.23.11 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO WX 8000/9000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3 (23.19.23.11 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO VII",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3 (23.19.23.11 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 Instinct\u2122 MI25",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V520",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V620",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:24:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow  memory access outside the intended range resulting in loss of integrity.\u003cbr\u003e"
            }
          ],
          "value": "A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow  memory access outside the intended range resulting in loss of integrity."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 1.8,
            "baseSeverity": "LOW",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190  Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:25:56.460Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2021-26380",
    "datePublished": "2026-05-15T02:25:20.977Z",
    "dateReserved": "2021-01-29T21:24:26.159Z",
    "dateUpdated": "2026-05-15T13:21:36.142Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-46747 (GCVE-0-2021-46747)

Vulnerability from cvelistv5 – Published: 2026-06-01 19:01 – Updated: 2026-06-02 13:45

Summary

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-1220 - Insufficient Granularity of Access Control

Assigner

AMD

References

2 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…

Impacted products

27 products

Vendor	Product	Version
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	Unaffected: CastlePeakWSPI-sWRX8 1.0.0.9 Unaffected: ChagallWSPI-sWRX8 1.0.0.2
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 PI 1.2.0.6
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.1
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.8
AMD	AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.0.9
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4PI 1.0.0.9/ComboAM4 V2 PI 1.2.0.8
AMD	AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 PI 1.2.0.8
AMD	AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.0.9
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Unaffected: ComboAM4v2 PI 1.2.0.6
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4 V2 PI 1.2.0.8
AMD	AMD Ryzen™ Embedded R1000 Series Processors	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded R2000 Series Processors	Unaffected: EmbeddedPI-FP5_1002
AMD	AMD Ryzen™ Embedded 5000 Series Processors	Unaffected: EmbAM4PI 1.0.0.2
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded V2000 Series Processors	Unaffected: EmbeddedPI-FP6_1.0.0.6
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Unaffected: EmbeddedPI-FP7r2_0080
AMD	AMD Radeon™ RX 5000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)
AMD	AMD Radeon™ PRO W5000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)
AMD	AMD Radeon™ RX 7000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Radeon™ PRO V520	Unaffected: Contact your AMD Customer Engineering representative
AMD	AMD Radeon™ PRO V620	Unaffected: Contact your AMD Customer Engineering representative

Date Public

2026-06-01 18:56

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-46747",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-02T03:56:08.958235Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-02T13:45:20.545Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CastlePeakWSPI-sWRX8 1.0.0.9"
            },
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.1"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.9/ComboAM4 V2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7030 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4 V2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1002"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI 1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Picasso\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6_1.0.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP7r2_0080"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V520",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V620",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        }
      ],
      "datePublic": "2026-06-01T18:56:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges. \u003cbr\u003e"
            }
          ],
          "value": "Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1220",
              "description": "CWE-1220  Insufficient Granularity of Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T19:01:27.968Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2021-46747",
    "datePublished": "2026-06-01T19:01:27.968Z",
    "dateReserved": "2022-03-31T16:50:27.864Z",
    "dateUpdated": "2026-06-02T13:45:20.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-23817 (GCVE-0-2022-23817)

Vulnerability from cvelistv5 – Published: 2024-08-13 16:51 – Updated: 2026-05-15 03:03

Summary

Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.

Severity

7.3 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper Input Validation
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

AMD

References

4 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…

Impacted products

42 products

Vendor	Product	Version
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.5 Unaffected: CastlePeakWSPI-sWRX8 1.0.0.A
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 PI 1.2.0.8
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.5
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.A
AMD	AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.0.C
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4V1 1.0.0.A Unaffected: ComboAM4V2 1.2.0.9
AMD	AMD Ryzen™ 2000 Mobile Processors	Unaffected: ComboAM4v2 PI 1.2.0.8 Unaffected: ComboAM4PI 1.0.0.9
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Unaffected: ComboAM4v2 PI 1.2.0.8
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4v2 PI 1.2.0.8
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Unaffected: RembrandtPI-FP7_1.0.0.5
AMD	AMD Ryzen™ Embedded R1000 Series Processors	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded R2000 Series Processors	Unaffected: EmbeddedR2KPI-FP5 1.0.0.2
AMD	AMD Ryzen™ Embedded 5000 Series Processors	Unaffected: EmbAM4PI 1.0.0.2
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded V2000 Series Processor	Unaffected: EmbeddedPI-FP6_1.0.0.8
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Unaffected: EmbeddedPI-FP7r2_1002
AMD	AMD Radeon™ RX 5000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)
AMD	AMD Radeon™ PRO W5000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 22.Q2 (22.10.20)
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 22.Q2 (22.10.20)
AMD	MI-25 / 50	Unaffected: No fix planned
AMD	MI-100	Unaffected: ROCm 6.4.2
AMD	AMD Instinct™ MI250	Unaffected: ROCm 7.0
AMD	AMD Instinct™ MI210	Unaffected: ROCm 7.0
amd	ryzen_3_3300x_firmware	Unaffected: 0 , < comboam4v2_1.2.0.a (custom) cpe:2.3:o:amd:ryzen_9_3900_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_3900xt_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3500_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3500x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3600_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3100_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:::::::*
amd	ryzen_3_3300u_firmware	Unaffected: 0 , < picassopi-fp5_1.0.0.e (custom) cpe:2.3:o:amd:ryzen_7_3700c_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_3700u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_3750h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_3780u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3450u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3500c_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3500u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3550h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3580u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3350u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3300u_firmware:-:::::::*
amd	ryzen_3_pro_3200g_firmware	Unaffected: 0 , < comboam4v2_pi_1.2.0.8 (custom) cpe:2.3:o:amd:ryzen_7_4700g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_4700ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4600ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4600g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3200ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_4300ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_4300g_firmware:-:::::::*
amd	ryzen_5_7500f_firmware	Unaffected: 0 , < comboam5_1.0.8.0 (custom) cpe:2.3:o:amd:ryzen_5_7500f_firmware:-:::::::*
amd	ryzen_threadripper_pro_3995wx_firmware	Unaffected: 0 , < castlepeakpi-sp3r3_1.0.0.8 (custom) cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:::::::*
amd	ryzen_threadripper_pro_3995wx_firmware	Unaffected: 0 , < castlepeakwspi-swrx8_1.0.0.a (custom) cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:::::::*
amd	ryzen_threadripper_pro_5995wx_firmware	Unaffected: 0 , < chagallwspi-swrx8_1.0.0.5 (custom) cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:::::::*
amd	ryzen_3_4300u_firmware	Unaffected: 0 , < renoirpi-fp6_1.0.0.a (custom) cpe:2.3:o:amd:ryzen_9_4900h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_4900hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_4700u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_4800h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_4800hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_4800u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_4980u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4500u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4600h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4600hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4600u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_4680u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_4300u_firmware:-:::::::*
amd	ryzen_5_6600u_firmware	Unaffected: 0 , < rembrandtpi-fp7_1.0.0.5 (custom) cpe:2.3:o:amd:ryzen_9_6900hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_6900hx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_6980hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_6980hx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_6800h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_6800hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_6800u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_6600h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_6600hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_6600u_firmware:-:::::::*
amd	ryzen_3_7335u_firmware	Unaffected: 0 , < rembrandtpi-fp7_1.0.0.5 (custom) cpe:2.3:o:amd:ryzen_7_7735hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_7735u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_7736u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_7535hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_7535u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_7335u_firmware:-:::::::*
amd	ryzen_7_7745hx_firmware	Unaffected: 0 , < dragonrangefl1pi_1.0.0.3b (custom) cpe:2.3:o:amd:ryzen_9_7945hx3d_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_7945hx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_7845hx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_7745hx_firmware:-:::::::*
amd	ryzen_5_5600x_firmware	Unaffected: 0 , < comboam4v2_pi_1.2.0.8 (custom) cpe:2.3:o:amd:ryzen_9_5900_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_5950x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5700_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5700x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5800_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5800x3d_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5800x_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5500_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600x3d_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:::::::*
amd	ryzen_3_5300g_firmware	Unaffected: 0 , < cezannepi-fp6_1.0.0.c (custom) cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_pro_3350ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_pro_3350g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_pro_3400ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_pro_3400g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3200ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_3200g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_pro_3200ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_pro_3200g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5700ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5700g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5500gt_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600g_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600gt_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5300ge_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_5300g_firmware:-:::::::*
amd	ryzen_3_5425c_firmware	Unaffected: 0 , < cezannepi-fp6_1.0.0.c (custom) cpe:2.3:o:amd:ryzen_9_5900hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_5900hx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_5980hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_9_5980hx_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5800h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5800hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5800u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_7_5825u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5500h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5560u_firmware:cezannepi-fp6_1.0.0.9:::::::* cpe:2.3:o:amd:ryzen_5_5600h_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600hs_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5600u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_5_5625u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:::::::* cpe:2.3:o:amd:ryzen_3_5425c_firmware:-:::::::*
amd	athlon_pro_300ge_firmware	Unaffected: 0 , < picassopi-fp5_1.0.0.e (custom) cpe:2.3:o:amd:athlon_3000g_firmware:-:::::::* cpe:2.3:o:amd:athlon_gold_3150ge_firmware:-:::::::* cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:::::::* cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:::::::* cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:::::::*

Date Public

2026-05-15 03:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_9_3900_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_3900xt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3500x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_3300x_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "comboam4v2_1.2.0.a",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_7_3700c_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_3700u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_3750h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_3780u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3450u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3500c_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3500u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3550h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3580u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3350u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3300u_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_3300u_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "picassopi-fp5_1.0.0.e",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_7_4700g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_4700ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4600ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4600g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3200ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_4300ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_4300g_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_pro_3200g_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "comboam4v2_pi_1.2.0.8",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_5_7500f_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_5_7500f_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "comboam5_1.0.8.0",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_threadripper_pro_3995wx_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "castlepeakpi-sp3r3_1.0.0.8",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_threadripper_pro_3995wx_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "castlepeakwspi-swrx8_1.0.0.a",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_threadripper_pro_5995wx_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "chagallwspi-swrx8_1.0.0.5",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_9_4900h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_4900hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_4700u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_4800h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_4800hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_4800u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_4980u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4500u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4600h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4600hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4600u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_4680u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_4300u_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_4300u_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "renoirpi-fp6_1.0.0.a",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_9_6900hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_6900hx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_6980hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_6980hx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_6800h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_6800hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_6800u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_6600h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_6600hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_6600u_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_5_6600u_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "rembrandtpi-fp7_1.0.0.5",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_7_7735hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_7735u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_7736u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_7535hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_7535u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_7335u_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_7335u_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "rembrandtpi-fp7_1.0.0.5",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_9_7945hx3d_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_7945hx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_7845hx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_7745hx_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_7_7745hx_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "dragonrangefl1pi_1.0.0.3b",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_9_5900_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_5950x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5700_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5700x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5800_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5800x3d_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5800x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5500_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600x3d_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_5_5600x_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "comboam4v2_pi_1.2.0.8",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_pro_3350ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_pro_3350g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_pro_3400ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_pro_3400g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3200ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_3200g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_pro_3200ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_pro_3200g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5700ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5700g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5500gt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600gt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5300ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_5300g_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_5300g_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "cezannepi-fp6_1.0.0.c",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:ryzen_9_5900hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_5900hx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_5980hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_9_5980hx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5800h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5800hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5800u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_7_5825u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5500h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5560u_firmware:cezannepi-fp6_1.0.0.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600h_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600hs_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5600u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_5_5625u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:ryzen_3_5425c_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "ryzen_3_5425c_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "cezannepi-fp6_1.0.0.c",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:athlon_3000g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:athlon_gold_3150ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "affected",
            "product": "athlon_pro_300ge_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "picassopi-fp5_1.0.0.e",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-23817",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-13T17:51:43.434721Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-16T20:27:19.545Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.5"
            },
            {
              "status": "unaffected",
              "version": "CastlePeakWSPI-sWRX8 1.0.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.0.C"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4V1 1.0.0.A"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4V2 1.2.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 2000 Mobile Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPI-FP5 1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI 1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Picasso\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V2000 Series Processor",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6_1.0.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP7r2_1002"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 22.Q2 (22.10.20)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 22.Q2 (22.10.20)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "MI-25 / 50",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "MI-100",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.4.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI250",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 7.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI210",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 7.0"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T03:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.\u003cbr\u003e"
            }
          ],
          "value": "Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20  Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T03:03:25.036Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2022-23817",
    "datePublished": "2024-08-13T16:51:45.468Z",
    "dateReserved": "2022-01-21T17:14:12.302Z",
    "dateUpdated": "2026-05-15T03:03:25.036Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-23826 (GCVE-0-2022-23826)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:30 – Updated: 2026-05-15 13:20

Summary

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

Severity

1.8 (Low)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

AMD

References

2 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…

Impacted products

21 products

Vendor	Product	Version
AMD	AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.0.E
AMD	AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 PI 1.2.0.8
AMD	AMD Ryzen™ Embedded R1000 Series Processors	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded R2000 Series Processors	Unaffected: EmbeddedR2KPI-FP5_1.0.0.2
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Unaffected: EmbeddedPI-FP5_1.2.0.A
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	Unaffected: 120A
AMD	AMD Radeon™ RX 5000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09)
AMD	AMD Radeon™ PRO W5000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09)
AMD	AMD Radeon™ VII	Unaffected: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA)
AMD	AMD Radeon™ RX Vega Series Graphics Cards	Unaffected: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA)
AMD	AMD Radeon™ PRO W6000 Series Graphics Product	Unaffected: AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD	AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards	Unaffected: AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
AMD	AMD Radeon™ PRO VII	Unaffected: AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
AMD	AMD Instinct™ MI250	Unaffected: ROCm 6.4.2
AMD	AMD Instinct™ MI210	Unaffected: ROCm 6.4.2
AMD	AMD Radeon™ Instinct™ MI25	Unaffected: Contact your AMD Customer Engineering representative
AMD	AMD Radeon™ PRO V520	Unaffected: Contact your AMD Customer Engineering representative
AMD	AMD Radeon™ PRO V620	Unaffected: Contact your AMD Customer Engineering representative

Date Public

2026-05-15 02:29

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-23826",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T13:20:50.340534Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T13:20:55.905Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 PI 1.2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPI-FP5_1.0.0.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5_1.2.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Picasso\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "120A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W5000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q2 (25.10.10)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 VII",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX Vega Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Product",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q2 (25.10.10)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q2 (25.10.10)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO WX 8000/9000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO VII",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI250",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.4.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI210",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.4.2"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 Instinct\u2122 MI25",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V520",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V620",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:29:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.\u003cbr\u003e"
            }
          ],
          "value": "A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 1.8,
            "baseSeverity": "LOW",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367  Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:30:46.618Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2022-23826",
    "datePublished": "2026-05-15T02:30:16.389Z",
    "dateReserved": "2022-01-21T17:20:55.780Z",
    "dateUpdated": "2026-05-15T13:20:55.905Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-31309 (GCVE-0-2023-31309)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:48 – Updated: 2026-05-15 11:17

Summary

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-129 - Improper Validation of Array Index

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

4 products

Vendor	Product	Version
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 23.Q4
AMD	AMD Radeon™ PRO V520	Unaffected: Contact your AMD Customer Engineering representative
AMD	AMD Radeon™ PRO V620	Unaffected: Contact your AMD Customer Engineering representative

Date Public

2026-05-15 02:41

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-31309",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T11:17:47.667533Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T11:17:56.008Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 23.Q4"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V520",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V620",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:41:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability. \n\u003cbr\u003e"
            }
          ],
          "value": "Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129  Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:48:41.696Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-31309",
    "datePublished": "2026-05-15T02:48:10.723Z",
    "dateReserved": "2023-04-27T15:25:41.422Z",
    "dateUpdated": "2026-05-15T11:17:56.008Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-31316 (GCVE-0-2023-31316)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:36 – Updated: 2026-05-15 16:38

Summary

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1304 - Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation

Assigner

AMD

References

2 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://www.amd.com/en/resources/product-security…

Impacted products

18 products

Vendor	Product	Version
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Unaffected: Cezanne-FP6 1.0.1.0
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5PI 1.0.0.a
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Unaffected: ComboAM4v2 1.2.0.Ca
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2 1.2.0.Ca
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7_1.1.0.0
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: Renoir-FP6 1.0.0.D
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Unaffected: Rembrandt-FP7 1.0.0.A
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Unaffected: MendocinoPI-FT6_1.0.0.6
AMD	AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	Unaffected: DragonRangeFL1PI 1.0.0.3C
AMD	AMD Ryzen™ Embedded V2000 Series Processors	Unaffected: EmbeddedPI-FP6_1.0.0.9
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Unaffected: Embedded-PI_FP7r2 1009
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.12.1 (25.10.37.01)
AMD	AMD Radeon™ RX 7000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q4 (25.10.37.01)
AMD	AMD Instinct™ MI250	Unaffected: ROCm 6.4
AMD	AMD Instinct™ MI210	Unaffected: ROCm 6.4
AMD	AMD Radeon™ PRO V620	Unaffected: Contact your AMD Customer Engineering representative

Date Public

2026-05-15 02:35

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-31316",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T16:37:05.742579Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T16:38:45.975Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Cezanne-FP6 1.0.1.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.a"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 1.2.0.Ca"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2 1.2.0.Ca"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.1.0.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Renoir-FP6 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Rembrandt-FP7 1.0.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MendocinoPI-FT6_1.0.0.6"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7045 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "DragonRangeFL1PI 1.0.0.3C"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6_1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Embedded-PI_FP7r2 1009"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.12.1 (25.10.37.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q4 (25.10.37.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI250",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.4"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI210",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.4"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V620",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.\u003cbr\u003e"
            }
          ],
          "value": "Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1304",
              "description": "CWE-1304  Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:36:46.858Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html"
        },
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-31316",
    "datePublished": "2026-05-15T02:36:10.619Z",
    "dateReserved": "2023-04-27T15:25:41.423Z",
    "dateUpdated": "2026-05-15T16:38:45.975Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-31317 (GCVE-0-2023-31317)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:47 – Updated: 2026-05-16 03:56

Summary

Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

6 products

Vendor	Product	Version
AMD	AMD Radeon™ RX 6000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)
AMD	AMD Radeon™ RX 7000 Series Graphics Products	Unaffected: AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Instinct™ MI250	Unaffected: ROCm 7.0
AMD	AMD Instinct™ MI210	Unaffected: ROCm 7.0

Date Public

2026-05-15 02:41

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-31317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-16T03:56:15.164Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W6000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI250",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 7.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI210",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 7.0"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:41:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.\u003cbr\u003e"
            }
          ],
          "value": "Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119  Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:47:39.059Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-31317",
    "datePublished": "2026-05-15T02:47:12.434Z",
    "dateReserved": "2023-04-27T15:25:41.423Z",
    "dateUpdated": "2026-05-16T03:56:15.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-21950 (GCVE-0-2024-21950)

Vulnerability from cvelistv5 – Published: 2026-05-15 03:00 – Updated: 2026-05-15 11:12

Summary

An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.

Severity

1.8 (Low)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

4 products

Vendor	Product	Version
AMD	AMD Instinct™ MI300X	Unaffected: No fix planned
AMD	AMD Instinct™ MI300A	Unaffected: No fix planned
AMD	AMD Instinct™ MI325X	Unaffected: No fix planned
AMD	AMD Instinct™ MI308X	Unaffected: No fix planned

Date Public

2026-05-15 03:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21950",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T11:12:24.735247Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T11:12:35.216Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122  MI300X",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122  MI300A",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122  MI325X",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122  MI308X",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T03:00:09.088Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability.\u003cbr\u003e"
            }
          ],
          "value": "An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiality or availability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "baseScore": 1.8,
            "baseSeverity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125  Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T03:00:25.843Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21950",
    "datePublished": "2026-05-15T03:00:25.843Z",
    "dateReserved": "2024-01-03T16:43:21.323Z",
    "dateUpdated": "2026-05-15T11:12:35.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-36323 (GCVE-0-2024-36323)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:59 – Updated: 2026-05-16 03:56

Summary

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

Severity

8.8 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Security Vulnerability
CWE-284 - Improper Access Control

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

6 products

Vendor	Product	Version
AMD	AMD Radeon™ RX 7000 Series Graphics Products	Unaffected: Radeon Software for Linux 24.20.3 Unaffected: AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01)
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	Unaffected: Radeon Software for Linux 24.20.3 Unaffected: AMD Software: PRO Edition 25.Q3.1 (25.10.32)
AMD	AMD Instinct™ MI308X	Unaffected: ROC 6.3
AMD	AMD Instinct™ MI325X	Unaffected: ROC 6.3
AMD	AMD Instinct™ MI300X	Unaffected: ROCm 6.3
AMD	AMD Instinct™ MI300A	Unaffected: ROCm 6.3

Date Public

2026-05-15 02:42

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-36323",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-16T03:56:11.834Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 RX 7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Radeon Software for Linux 24.20.3"
            },
            {
              "status": "unaffected",
              "version": "AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO W7000 Series Graphics Products",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Radeon Software for Linux 24.20.3"
            },
            {
              "status": "unaffected",
              "version": "AMD Software: PRO Edition 25.Q3.1 (25.10.32)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI308X",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROC 6.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI325X",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROC 6.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI300X",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI300A",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ROCm 6.3"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:42:50.705Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.\u003cbr\u003e"
            }
          ],
          "value": "Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Security Vulnerability",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:59:08.150Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-36323",
    "datePublished": "2026-05-15T02:59:08.150Z",
    "dateReserved": "2024-05-23T19:44:40.301Z",
    "dateUpdated": "2026-05-16T03:56:11.834Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-36332 (GCVE-0-2024-36332)

Vulnerability from cvelistv5 – Published: 2026-05-15 02:51 – Updated: 2026-05-15 13:36

Summary

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1189 - Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

1 product

Vendor	Product	Version
AMD	AMD Radeon™ PRO V710	Unaffected: Contact your AMD Customer Engineering representative

Date Public

2026-05-15 02:42

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-36332",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T13:35:44.822468Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T13:36:00.217Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD Radeon\u2122 PRO V710",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Contact your AMD Customer Engineering representative"
            }
          ]
        }
      ],
      "datePublic": "2026-05-15T02:42:09.250Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition.\u003cbr\u003e"
            }
          ],
          "value": "Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GPU MMIO register space, potentially causing the host OS to reboot and creating a Denial of Service (DOS) condition."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1189",
              "description": "CWE-1189  Improper Isolation of Shared Resources on System-on-a-Chip (SoC)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T02:51:02.752Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-36332",
    "datePublished": "2026-05-15T02:51:02.752Z",
    "dateReserved": "2024-05-23T19:44:44.387Z",
    "dateUpdated": "2026-05-15T13:36:00.217Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-1697

CVE-2021-26380 (GCVE-0-2021-26380)

CVE-2021-46747 (GCVE-0-2021-46747)

CVE-2022-23817 (GCVE-0-2022-23817)

CVE-2022-23826 (GCVE-0-2022-23826)

CVE-2023-31309 (GCVE-0-2023-31309)

CVE-2023-31316 (GCVE-0-2023-31316)

CVE-2023-31317 (GCVE-0-2023-31317)

CVE-2024-21950 (GCVE-0-2024-21950)

CVE-2024-36323 (GCVE-0-2024-36323)

CVE-2024-36332 (GCVE-0-2024-36332)

Tags

Sightings

Nomenclature