AMD AMD Ryzen™ 9000HX Series Processors

Name: AMD AMD Ryzen™ 9000HX Series Processors
Brand: AMD

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-62619US	—OT elevated	0.32% (25th)	—	AMD Device Management Portal 3.0.0.895	2026-05-14	< AMD Device Management Portal 3.0.0.895
CVE-2025-62626US	—	0.17% (6th)	—	FireRangeFL1PI 1.0.0.0e	2025-11-21	< FireRangeFL1PI 1.0.0.0e
CVE-2025-62625US	—	0.17% (6th)	—	AMD Device Management Portal 3.0.0.895	2026-05-14	< AMD Device Management Portal 3.0.0.895
CVE-2024-36353US	—	0.16% (5th)	—	Radeon Software For Linux 25.10.1	2025-03-02	< Radeon Software For Linux 25.10.1
CVE-2025-0032US	—	0.15% (4th)	—	FireRangeFL1PI 1.0.0.0a	2025-09-06	< FireRangeFL1PI 1.0.0.0a
CVE-2025-54502US	—	0.14% (4th)	—	FireRangeFL1PI 1.0.0.0d	2026-04-16	< FireRangeFL1PI 1.0.0.0d
CVE-2026-0438US	—	0.14% (3rd)	—	FireRangeFL1PI 1.0.0.0d	2026-05-15	< FireRangeFL1PI 1.0.0.0d
CVE-2025-54514US	—	0.12% (2nd)	—	FireRangeFL1 PI-1.0.0.0d	2026-02-10	< FireRangeFL1 PI-1.0.0.0d
CVE-2025-0045US	—	0.11% (1st)	—	AMD Ryzen™ Chipset Driver 7.02.13.148 with PSP driver 5.38.0.0	2026-05-15	< AMD Ryzen™ Chipset Driver 7.02.13.148 with PSP driver 5.38.0.0
CVE-2024-21962US	—	0.11% (1st)	—	AMD RAID Software: 9.3.3.245	2026-05-15	< AMD RAID Software: 9.3.3.245
CVE-2025-48512US	—OT elevated	0.11% (1st)	—	7.04.09.545	2026-05-15	< 7.04.09.545
CVE-2026-0432US	—OT elevated	0.10% (1st)	—	AMD Ryzen™ Chipset Driver 8.01.20.513	2026-05-15	< AMD Ryzen™ Chipset Driver 8.01.20.513
CVE-2025-48516US	—OT elevated	0.09% (0th)	—	No fix planned	2026-05-15	< No fix planned

The flaw types (CWEs) most of these CVEs share.

CWE-276Incorrect Default Permissions3 CVEs
CWE-459Incomplete Cleanup2 CVEs
CWE-1072Data Resource Access without Use of Connection Pooling1 CVEs
CWE-1189Improper Isolation of Shared Resources on System-on-a-Chip (SoC)1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.