CVE-2025-29936CWE-20

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting…

High · published May 15, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00104 · 1.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-05-15T01:52Z
EPSS history
Timeline
  • 15 MAY 01:52Z
    Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting…
    cvelistv5