4.8
Medium
CVE-2025-0044 An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially…
Description
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ Al Max+ | Versions not published | |
| AMD Ryzen™ AI 300 Series Processors | Versions not published | |
| AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 8000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ Embedded 8000 Series Processors | Versions not published | |
| AMD Radeon™ RX 7000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO W7000 Series Graphics Products | Versions not published |
Other CVEs of AMD Ryzen™ Al Max+
The 6 CVEs of AMD Ryzen™ Al Max+ →
CVE-2025-29936
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap…
8.4
High
CVE-2025-48518
Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially…
6.9
Medium
CVE-2024-36324
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer,…
8.8
High
CVE-2024-36316
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks…
5.5
Medium