CVE-2025-29936
HighSummary
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.
Risk Assessment
The risk to the organization includes potential compromise of system integrity and availability, as well as possible loss of data confidentiality due to privilege escalation by an attacker.
Recommendation
It is recommended to conduct a security audit and update the software to improve input validation in AMD PMF.
Other vulnerabilities in AMD Platform Management Framework (PMF)
See all- CVE-2025-29938High
An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.
- CVE-2025-29935High
An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability.
- CVE-2025-0028High
An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability.
Original NVD description (English source)
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.