CVE-2025-29938
Possible ATT&CK Techniques 2AI
T1068 · Exploitation for Privilege Escalation T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AMD | AMD Ryzen Embedded 8000 Series Processors | AMD Ryzen™ Chipset Driver 7.06.02.123 | unaffected |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") | 7.06.02.123 | unaffected |
| AMD | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix") | 7.06.02.123 | unaffected |
| AMD | AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") | 7.06.02.123 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-29938
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
未加检查的返回值
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Ryzen是美国超威半导体（AMD）公司的一款中央处理器（CPU）。 AMD多款产品存在安全漏洞，该漏洞源于未检查返回值，可能导致攻击者写入任意内存地址，从而造成拒绝服务或任意代码执行。以下产品受到影响：AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics、AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics、AMD Ryzen™ 8040 Series Mobile
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") | 7.06.02.123 | - | |
| AMD | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix") | 7.06.02.123 | - | |
| AMD | AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Hawk Point") | 7.06.02.123 | - | |
| AMD | AMD Ryzen Embedded 8000 Series Processors | AMD Ryzen™ Chipset Driver 7.06.02.123 | - |
II. Public POCs for CVE-2025-29938
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-29938
请登录查看更多情报信息。
Same Patch Batch · AMD · 2026-05-15 · 39 CVEs total
| CVE-2025-52540 | AMD Chipset 缓冲区错误漏洞 | |
| CVE-2021-26380 | AMD Graphics Driver 输入验证错误漏洞 | |
| CVE-2025-0040 | AMD Processors 访问控制错误漏洞 | |
| CVE-2024-21962 | AMD RAID Driver 安全漏洞 | |
| CVE-2025-29935 | AMD Chipset 缓冲区错误漏洞 | |
| CVE-2025-29944 | AMD Ryzen 安全漏洞 | |
| CVE-2025-29937 | AMD Processors 缓冲区错误漏洞 | |
| CVE-2025-0028 | AMD Chipset 安全漏洞 | |
| CVE-2025-29936 | AMD多款产品 输入验证错误漏洞 | |
| CVE-2025-48513 | AMD Chipset 安全漏洞 | |
| CVE-2022-23826 | AMD Processors 安全漏洞 | |
| CVE-2025-48520 | AMD多款产品 缓冲区错误漏洞 | |
| CVE-2025-48519 | AMD Chipset 缓冲区错误漏洞 | |
| CVE-2025-0045 | AMD Secure Processor 安全漏洞 | |
| CVE-2026-0432 | AMD Chipset 安全漏洞 | |
| CVE-2025-48521 | AMD Processors 资源管理错误漏洞 | |
| CVE-2025-48512 | AMD Chipset 安全漏洞 | |
| CVE-2024-36345 | AMD OverDrive 安全漏洞 | |
| CVE-2026-0438 | AMD Chipset 安全漏洞 | |
| CVE-2023-31309 | AMD Radeon 输入验证错误漏洞 |
Showing top 20 of 39 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-252
- CVE-2025-0028
AMD Chipset 安全漏洞 - CVE-2026-40060
BIG-IP Advanced WAF and ASM vulnerability - CVE-2026-34065
nimiq-primitives: Node crash due to missing interlink valida - CVE-2026-35344
uutils coreutils dd Silent Data Corruption via Unconditional - CVE-2026-35468
nimiq/core-rs-albatross: Panic in history index request hand
V. Comments for CVE-2025-29938
No comments yet