AMD vulnerability disclosures

Explore 29 current published CVE records under this source identity, canonical score coverage, provider assessments and recent disclosures. Verify affected versions in the original source.

Current source coverage

Published CVE records

29

Canonical CVSS recorded

23

No canonical CVSS score

6

Listed in the retained CISA KEV catalog

0

EPSS recorded

29

NVD status recorded

29

Recent source disclosures

• CVE-2023-31347 — Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.  
• CVE-2023-31346 — Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.
• CVE-2023-20592 — Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.
• CVE-2023-20519 — A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.
• CVE-2023-31320 — Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.
• CVE-2023-20598 — An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.
• CVE-2023-20561 —
• CVE-2023-20556 —
• CVE-2023-20562 —
• CVE-2023-20558 — Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

Source products

• 2nd Gen EPYC — 14 CVEs
• 3rd Gen AMD EPYC™ Processors — 1 CVEs
• 4th Gen AMD EPYC™ Processors — 3 CVEs
• Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards — 1 CVEs
• Radeon™ RX 5000 Series Graphics Cards — 1 CVEs
• Radeon™ RX 5000/6000/7000 Series Graphics Cards — 1 CVEs
• Ryzen 2000 Series — 1 CVEs
• Ryzen 3000 Series — 1 CVEs
• Ryzen 5000 Series — 2 CVEs
• Ryzen 5000 Series — 1 CVEs
• Ryzen™ 2000 Series — 2 CVEs
• Ryzen™ 3000 Series — 2 CVEs
• Ryzen™ 4000 Series — 2 CVEs
• Ryzen™ Master — 1 CVEs
• μProf — 3 CVEs

Source revision: a57c5fef8999dd727850df0964bbdbc83b9ab7b3

Counts describe distinct currently published, source-present CVE records, grouping only case variations of publisher-supplied names; they do not establish organizational exposure.

Canonical labels retain an actual source spelling. Synonyms and aliases are not merged; versions and vendor attribution require source review.

Provider coverage describes currently retained assessments; it does not reconstruct historical risk. Check source freshness separately.