Which versions of AMD Platform Management Framework are affected by CVE-2025-29936?

CVE-2025-29936 is a high-severity local privilege escalation in AMD Platform Management Framework affecting Ryzen mobile processors (6000/7000/8000/AI 300 series) that allows low-privileged…

How to fix or mitigate CVE-2025-29936?

Within 24 hours: Inventory all AMD Ryzen mobile processors in use (6000/7000/8000/AI 300 series) and document current firmware/BIOS versions via IT asset management. Within 7 days: Contact AMD support for microcode/firmware updates and estimated availability timeline; implement enhanced endpoint monitoring focused on PMF drivers and privilege escalation attempts. Within 30 days: Apply AMD Platform Management Framework security updates and microcode patches immediately upon vendor release; for systems where no patch is available, restrict low-privileged user account creation and enforce full-disk encryption on all affected devices.

AMD Platform Management Framework CVE-2025-29936

Q: What is the CVSS score of CVE-2025-29936?

CVE-2025-29936 has a CVSS 4.0 base score of 8.4 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2025-209869 HIGH

Improper Input Validation (CWE-20)

2026-05-15 AMD

GHSA-7vj2-xcgm-4r5f

Privilege Escalation Amd

8.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.4 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 15, 2026 - 03:30 vuln.today

CVSS changed

May 15, 2026 - 03:22 NVD

8.4 (HIGH)

CVE Published

May 15, 2026 - 01:52 nvd

HIGH 8.4

DescriptionCVE.org

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.

AnalysisAI

Local privilege escalation in AMD Platform Management Framework (PMF) allows authenticated attackers with low privileges to unmap arbitrary memory pages, potentially executing code with elevated privileges or triggering system crashes. Affects modern AMD Ryzen mobile processors across multiple generations (6000/7000/8000/AI 300 series, embedded variants). The vulnerability enables both horizontal escalation (confidentiality compromise via changed scope in CVSS 4.0) and vertical impact (integrity/availability degradation). No evidence of active exploitation (not in CISA KEV), but the local attack vector with low complexity makes this exploitable by malware or malicious insiders once system access is obtained. EPSS data not available for risk calibration.

Technical ContextAI

AMD Platform Management Framework (PMF) is a system-level software component managing power, thermal, and performance optimization on AMD Ryzen mobile processors. The vulnerability stems from CWE-20 (Improper Input Validation) where PMF fails to adequately validate input parameters before performing memory management operations. This allows manipulation of memory unmapping operations to target arbitrary physical or virtual memory pages. Affected products span seven processor families identified by CPE strings: Rembrandt (Ryzen 6000/7035), Phoenix (Ryzen 7040), Hawk Point (Ryzen 8040), Strix Point (Ryzen AI 300), Ryzen AI Max+, and Embedded 8000 series. All are mobile or embedded x86-64 platforms with integrated Radeon graphics. The framework operates with elevated privileges to manage hardware resources, making input validation failures particularly critical as they bridge userspace to kernel/firmware boundary.

RemediationAI

Apply AMD-provided firmware and driver updates per Security Bulletin AMD-SB-4015 available at https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html. The bulletin should contain PMF software updates for each affected processor family-check for BIOS/UEFI firmware updates from OEM system vendors (Dell, HP, Lenovo, etc.) as PMF components are often integrated into platform firmware. Update priority: systems with untrusted local users, shared workstations, or running unvetted software. For systems awaiting patches: enforce principle of least privilege rigorously-restrict local user accounts to standard permissions, disable unnecessary local admin rights, deploy application whitelisting to prevent unauthorized code execution that could leverage this vulnerability. Monitor for abnormal memory access patterns or unexpected privilege escalation via EDR telemetry. Note that restricting physical access alone is insufficient since malware with initial foothold can exploit this. Compensating controls reduce but do not eliminate risk-patching remains the only complete mitigation. Verify patch deployment via AMD driver version checks or OEM-specific firmware validation tools.