4.8
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.
Засегнати продукти
- AMD AMD Ryzen™ Al Max+: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20)
- AMD AMD Ryzen™ AI 300 Series Processors: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20)
- AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20)
- AMD AMD Ryzen™ 8000 Series Desktop Processors: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20)
- AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01), AMD Software: PRO Edition 24.Q2 (24.10.20)
- AMD AMD Ryzen™ Embedded 8000 Series Processors: Graphics driver: version 25.6.1, branch: 25.10.13.01. - Chipset version: 7.06.02.123
- AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
- AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: PRO Edition 24.Q2 (24.10.20)
Вид слабост
История
- 15 май 2026 Публикувано