CVE-2025-29935

8.4 highEPSS 0.1%

High (8.4). EPSS 0.1% chance of exploitation in the next 30 days.

An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability.

Severity

CVSS 4.0

8.4 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2026-05-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html

Check your stack JSON