CVE-2025-29938: high-severity vulnerability in AMD Ryzen Embedded 8000 Series Processors
Published · Updated
Follow this CVE+ Monitor AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics+ Monitor AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.1%
An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:H/SI:H/SA:H
Affected products
AMD · AMD Ryzen Embedded 8000 Series ProcessorsAMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")AMD · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")AMD · AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")Related CVEs — AMD Ryzen Embedded 8000 Series Processors
In the same product, most dangerous first.