CVE Tools
Track your stack

Amd

17 CVEs tracked since 2023. Since Jan 2023, none of them reached CISA KEV.

Amd CVEs per month

Jan 2023 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Amd CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-01170
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1011 or fewer
2026-110

Products

The products that kept showing up in Amd's monthly top three, with their CVEs summed over those months.

  1. 2nd Gen Epyc141 month
  2. Ryzen 5000 Series21 month
  3. Ryzen 3000 Series 11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Amd.

  1. CVE-2026-100493An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds ...—
  2. CVE-2026-40652An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a use...—
  3. CVE-2026-40661An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated ...—
  4. CVE-2026-40660A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information d...—
  5. CVE-2026-40659An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file, potentially resulting in denial of...—
  6. CVE-2026-43603A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.—
  7. CVE-2026-43598Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, po...—
  8. CVE-2026-0461Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to over...—
  9. CVE-2026-0482In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwri...—
  10. CVE-2023-20577A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.7.4
  11. CVE-2023-20576Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.7.7
  12. CVE-2023-31308A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.3.3
  13. CVE-2023-20511Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution.6.4
  14. CVE-2025-54512A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution.—
  15. CVE-2026-0465A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability—

The record

Peak rank
#46 in Jan 2023
Busiest month shown
Jan 2023, 17 CVEs
Months with a KEV entry
0 since Jan 2023
Monthly snapshots
1 since 2023
Amd's full record, month by month