CVE-2025-0028

State: Published
Severity: 8.3 High
Published: May 15, 2026
Updated: May 15, 2026
Reserved: Nov 21, 2024

Description

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability.

Scores

CVSS	Score	Vector	Source
4.0	8.3 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H	AMD

Weaknesses

CWE-252 Unchecked Return Value

Affected Products

Product	Versions
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")AMD	7.06.02.123Not affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")AMD	7.06.02.123Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")AMD	7.06.02.123Not affected
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")AMD	7.06.02.123Not affected
AMD Ryzen™ Embedded 8000 Series ProcessorsAMD	AMD Ryzen™ Chipset Driver 7.06.02.123Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.