CVE-2025-0044
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.
Published:May 15, 2026
Last Modified:May 15, 2026
EPS:May 15, 2026
EPSS Score:
CVSS Score:4.8
Affected Products
Vendor
Product
Action
Vendor
Amd
Product
Amd Ryzen™ Ai 300 Series Processors
Amd
Amd Ryzen™ Ai 300 Series Processors
Vendor
Amd
Product
Radeon Pro W7000 Series
Amd
Radeon Pro W7000 Series
Vendor
Amd
Product
Radeon Rx 7000 Series
Amd
Radeon Rx 7000 Series
Vendor
Amd
Product
Ryzen 7040 Series Mobile Processors With Radeon Graphics
Amd
Ryzen 7040 Series Mobile Processors With Radeon Graphics
Vendor
Amd
Product
Ryzen 8000 Series Desktop Processors
Amd
Ryzen 8000 Series Desktop Processors
Vendor
Amd
Product
Ryzen 8040 Series Mobile Processors With Radeon Graphics
Amd
Ryzen 8040 Series Mobile Processors With Radeon Graphics
Vendor
Amd
Product
Ryzen Al Max+
Amd
Ryzen Al Max+
Vendor
Amd
Product
Ryzen Embedded 8000 Series Processors
Amd
Ryzen Embedded 8000 Series Processors
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
