Advisories · Technology
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics.
Every CVE that names AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
NULL pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.6 Medium
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memo…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- Memory corruption
- CVSS 4.8 Medium
Out-of-bounds read in AMD Ryzen™ Al Max+ and others
- AMD Ryzen™ Al Max+
- AMD Ryzen™ AI 300 Series Processors
- Memory corruption
- CVSS 6.9 Medium
Incorrect default permissions in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Broken access control
- CVSS 7.1 High
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the tr…
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- CWE-1304
- CVSS 5.3 Medium
Improper access control in AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 8000 Series Desktop Processors
- Broken access control
- CVSS 8.6 High
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
- AMD EPYC™ 4005 Series Processors
- AMD EPYC™ 4004 Series Processors
- CWE-1220
- CVSS 6.9 Medium
Buffer overflow in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.5 High
Incorrect default permissions in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Broken access control
- CVSS 4.6 Medium
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confident…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- CWE-1274
- CVSS 5.4 Medium
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory.
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
- CWE-1072
- CVSS 6.3 Medium
Missing authentication in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Authentication bypass
- CVSS 6.0 Medium
Improper privilege management in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Privilege escalation
- CVSS 5.7 Medium
Protection mechanism failure in AMD EPYC™ Series 9004 Processors and others
- AMD EPYC™ Series 9004 Processors
- AMD EPYC™Series 4004 Processors
- CWE-693
- CVSS 7.1 High
Resource exposure in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Information disclosure
- CWE-648
- CVSS 6.0 Medium
Buffer overflow in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.7 High
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 7002 Series Processors
- CWE-1191
- CVSS 6.9 Medium
Out-of-bounds write in AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI 300 Series Processors
- Memory corruption
- CVSS 7.0 High
Integer overflow in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.8 High
Out-of-bounds write in AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics… and others
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 5.5 Medium
Integer overflow in AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics… and others
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.8 Medium
Out-of-bounds write in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.0 High
Out-of-bounds write in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 4.6 Medium
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or int…
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 9005 Series Processors
- Memory corruption
- CVSS 3.3 Low
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentialit…
- AMD Ryzen™ 8000 Series Desktop Processors
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- CWE-212
- CVSS 6.1 Medium
Out-of-bounds write in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ RX 6000 Series Graphics Products
- Memory corruption
- CVSS 7.5 High
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of…
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1231
- CVSS 8.4 High
Untrusted pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.8 High
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- CWE-1285
- CVSS 8.4 High
Missing authorization in AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI 300 Series Processors
- Broken access control
- CVSS 7.5 High
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1220
- CVSS 2.5 Low
Out-of-bounds read in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 2.8 Low
Use of uninitialized variable in AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.2 High
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiali…
- AMD Ryzen™ 8000 Series Desktop Processors
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- CWE-1189
- CVSS 3.2 Low
Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-459
- CVSS 6.5 Medium
Incomplete cleanup in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- CWE-459
- CVSS 3.4 Low
Improper access control in AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processor
- Broken access control