2026-05-15 归档

今日共收录 1277 条安全情报,包含 487 个 CVE,424 篇安全通告,以及 55 篇研究论文。

← 返回归档列表
安全公告2026-05-15 发布INFO

Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an...

CVE-2025-48513

Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a unini

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an...

CVE-2025-29938

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...

CVE-2025-66660

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could...

CVE-2025-48516

Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with loc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged...

CVE-2026-0427

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible...

CVE-2025-0040

Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...

CVE-2026-0428

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...

CVE-2025-54517

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via rem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper input validation within the AMD Platform Management Framework (PMF) could allow an...

CVE-2025-29936

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an...

CVE-2025-0028

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to...

CVE-2025-29944

A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An improper input validation vulnerability within the AMD Platform Management Framework (PMF)...

CVE-2025-48520

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest...

CVE-2024-36332

Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could...

CVE-2024-36345

Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Incorrect default permissions in the installation directory for the AMD general-purpose input...

CVE-2025-48512

Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper restriction of operations within the bounds of a memory buffer in the AMD secure...

CVE-2023-31317

Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An improper input validation vulnerability within the AMD Platform Management Framework (PMF)...

CVE-2025-48519

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow ...

CVE-2021-26380

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Incorrect default permissions in the installation directory for the AMD chipset driver could...

CVE-2026-0432

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achiev

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM...

CVE-2026-0438

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly pri

历史摘要 · 未重新核验 · GitHub Advisory