CVE-2025-29938

State: Published
Severity: 7.1 High
Published: May 15, 2026
Updated: May 16, 2026
Reserved: Mar 12, 2025

Description

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:H/SI:H/SA:H	AMD

Weaknesses

CWE-252 Unchecked Return Value

Affected Products

Product	Versions
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")AMD	7.06.02.123Not affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")AMD	7.06.02.123Not affected
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point")AMD	7.06.02.123Not affected
AMD Ryzen Embedded 8000 Series ProcessorsAMD	AMD Ryzen™ Chipset Driver 7.06.02.123Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.