Out-of-bounds Read in Amd Ryzen™ 6000 Series Processors With Radeon™ Graphics (Formerly Codenamed "Rembrandt")
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality.
Vulnerability class: Buffer Overflow
EPSS: 0.000 (3.8th percentile) — read the EPSS interpretation.
Affected products
- Amd Ryzen™ 6000 Series Processors With Radeon™ Graphics (Formerly Codenamed "Rembrandt") — versions 7.06.02.123
- Amd Ryzen™ 7035 Series Processors With Radeon™ Graphics (Formerly Codenamed "Rembrandt R") — versions 7.06.02.123
- Amd Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Phoenix") — versions 7.06.02.123
- Amd Ryzen™ 8040 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Hawk Point") — versions 7.06.02.123
- Amd Ryzen™ Embedded 8000 Series Processors — versions amd_chipset_software_7.06.02.123.exe
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-29937?
- CVE-2025-29937 is a vulnerability in Amd Ryzen™ 6000 Series Processors With Radeon™ Graphics (Formerly Codenamed "Rembrandt"), classified under Out-of-bounds Read. Published 2026-05-15.
- Is CVE-2025-29937 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.