An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker...
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an...
CVE-2025-48513
Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a unini
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could...
CVE-2025-48516
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with loc
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged...
CVE-2026-0427
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virt
Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible...
CVE-2025-0040
Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow a
A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to...
CVE-2025-29944
A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, p
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local...
CVE-2025-48521
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-Aft
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker...
CVE-2025-0045
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer ove
An improper input validation vulnerability within the AMD Platform Management Framework (PMF)...
CVE-2025-48520
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local a
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest...
CVE-2024-36332
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could...
CVE-2024-36345
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attack
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM...
CVE-2026-0438
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly pri
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to...
CVE-2023-31309
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when...
CVE-2026-6811
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSO
Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1...
CVE-2026-45248
Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users e
Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168...
CVE-2026-8583
Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker w
Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a...
CVE-2026-8584
Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had
Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...
CVE-2026-8582
Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially
Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168...
CVE-2026-8564
Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker
Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote...
CVE-2026-8552
Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to perform an