Back to CVE records
Medium 4.8Published May 14, 2026
CVE-2025-0044An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.
Updated under an hour ago ()
Does this affect you?
It affects AMD Ryzen™ Al Max+ and 7 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.
- CVSS
- 4.8 MEDIUM (v4.0, CNA)CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
- Weakness (CWE)
- CWE-125
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- AMD
- NVD analysis
- Awaiting Analysis
- Record last updated
- May 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
AMD AMD Ryzen™ Al Max+ amd:ryzentm_al_max+ (from the name) | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20) not affected | CNA record |
AMD AMD Ryzen™ AI 300 Series Processors amd:ryzentm_ai_300_series_processors (from the name) | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20) not affected | CNA record |
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics amd:ryzentm_7040_series_mobile_processors_with_radeontm_graphics (from the name) | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20) not affected | CNA record |
AMD AMD Ryzen™ 8000 Series Desktop Processors amd:ryzentm_8000_series_desktop_processors (from the name) | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20) not affected | CNA record |
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics amd:ryzentm_8040_series_mobile_processors_with_radeontm_graphics (from the name) | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20) not affected | CNA record |
AMD AMD Ryzen™ Embedded 8000 Series Processors amd:ryzentm_embedded_8000_series_processors (from the name) | Graphics driver: version 25.6.1, branch: 25.10.13.01. - Chipset version: 7.06.02.123 not affected | CNA record |
AMD AMD Radeon™ RX 7000 Series Graphics Products amd:radeontm_rx_7000_series_graphics_products (from the name) | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) not affected | CNA record |
AMD AMD Radeon™ PRO W7000 Series Graphics Products amd:radeontm_pro_w7000_series_graphics_products (from the name) | AMD Software: PRO Edition 24.Q2 (24.10.20) not affected | CNA record |
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.