Vulnerabilidades em AMD

458 resultados
Análise Vexday

O portfólio de vulnerabilidades da AMD reúne 443 CVEs catalogadas, com 59 registros surgidos nos últimos 90 dias, indicando um ritmo de descoberta que merece acompanhamento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com zero entradas no CISA KEV, o que sugere pressão operacional imediata menor em comparação com outros fornecedores. No entanto, a CVE mais perigosa atualmente monitorada, CVE-2023-20588, apresenta o maior EPSS observado no conjunto (0,1241), sinalizando probabilidade não negligenciável de exploração e justificando priorização nas rotinas de patch. A falha mais frequente, CWE-20 (validação inadequada de entrada), reflete uma fragilidade estrutural recorrente no código, enquanto as 6 CVEs de severidade crítica e a existência de pelo menos uma prova de conceito pública reforçam a necessidade de gestão ativa mesmo sem exploração confirmada no momento.

CVE-2025-48520MEDIUMAn improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-EPSS 0.1%CVE-2025-48519HIGHAn improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or wEPSS 0.1%CVE-2025-52540HIGHAn improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write OutEPSS 0.1%CVE-2025-0044MEDIUMAn out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial losEPSS 0.1%CVE-2026-28237MEDIUMUnrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of avaEPSS 0.1%CVE-2025-62623HIGHA heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially EPSS 0.1%CVE-2023-20585MEDIUMInsufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger EPSS 0.1%CVE-2021-46747HIGHInsufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to mEPSS 0.1%CVE-2025-62627HIGHAn untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel meEPSS 0.1%CVE-2023-31308LOWA malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory reaEPSS 0.1%CVE-2024-36323HIGHImproper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized accEPSS 0.1%CVE-2023-20518LOWIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shellEPSS 0.1%CVE-2023-31316HIGHImproperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) couldEPSS 0.1%CVE-2024-21950LOWAn out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of establEPSS 0.1%CVE-2025-48516MEDIUMInsecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege toEPSS 0.1%CVE-2022-23826LOWA TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race conditiEPSS 0.1%CVE-2024-36334HIGHImproper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory toEPSS 0.1%CVE-2025-52532LOWA race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmdEPSS 0.1%