CVE-2025-29936

State: Published
Severity: 8.4 High
Published: May 15, 2026
Updated: May 15, 2026
Reserved: Mar 12, 2025

Description

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.

Scores

CVSS	Score	Vector	Source
4.0	8.4 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H	AMD

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")AMD	7.06.02.123Not affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")AMD	7.06.02.123Not affected
AMD Ryzen™ AI 300 Series Processors (formerly codenamed "Strix Point")AMD	7.06.02.123Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")AMD	7.06.02.123Not affected
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt")AMD	7.06.02.123Not affected
AMD Ryzen™ Al Max+AMD	7.06.02.123Not affected
AMD Ryzen™ Embedded 8000 Series ProcessorsAMD	amd_chipset_software_7.06.02.123.exeNot affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.