Advanced Micro Devices Inc. AMD Ryzen AI 300 Series Processor
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical0high0medium0low
updated 2026-10-30
01
vulnerabilities (6)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2025-52533US | — | — | ||||
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity. | ||||||
| CVE-2024-36310US | — | — | ||||
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of con… | ||||||
| CVE-2025-62626US | — | — | ||||
Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the cons… | ||||||
| CVE-2025-54502US | — | — | ||||
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation… | ||||||
| CVE-2025-54514US | — | — | ||||
Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. | ||||||
| CVE-2024-21969US | — | — | ||||
Уязвимость микропрограммного обеспечения процессоров AMD связана с использованием неинициализированного ресурса. Эксплуатация уязвимости может позволить нарушителю выполнить произв… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-1189Improper Isolation of Shared Resources on System-on-a-Chip (SoC)1 CVEs
- CWE-1191On-Chip Debug and Test Interface With Improper Access Control1 CVEs
- CWE-124Buffer Underwrite1 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-250Execution with Unnecessary Privileges1 CVEs
- CWE-333Improper Handling of Insufficient Entropy in TRNG1 CVEs
- CWE-648Incorrect Use of Privileged APIs1 CVEs
- CWE-668Exposure of Resource to Wrong Sphere1 CVEs
03
sources (1)
Which sources assert this record, and when.
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan