CVE-2025-29935

State: Published
Severity: 8.4 High
Published: May 15, 2026
Updated: May 16, 2026
Reserved: Mar 12, 2025

Description

An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability.

Scores

CVSS	Score	Vector	Source
4.0	8.4 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H	AMD

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")AMD	7.06.02.123Not affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")AMD	7.06.02.123Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")AMD	7.06.02.123Not affected
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")AMD	7.06.02.123Not affected
AMD Ryzen™ Embedded R8000 Series ProcessorsAMD	AMD Ryzen™ Chipset Driver 7.06.02.123Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.