AMD Ryzen Al Max+ vulnerabilities
6 CVEs affecting AMD Ryzen Al Max+, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-29936, published 2026-05-15.
More from AMD.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2024-36324, published 2026-02-11. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
- CVE-2024-36316, published 2026-02-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service
- CVE-2025-0032, published 2025-09-06. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86…
- CVE-2025-48518, published 2026-02-11. Medium severity, CVSS 6.9. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service.
- CVE-2025-29936, published 2026-05-15. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing…
- CVE-2025-0044, published 2026-05-15. Medium severity, CVSS 4.8. EPSS: 0.1% chance of exploitation in the next 30 days. An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.