Read the docs
TI-2025-00007 Aliases CVE-2025-0011GHSA-m7mq-37p8-whp7

Improper removal of sensitive information before storage or transfer in AMD Crash…

Priority LOW 15CWE-212Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00187 8th percentileScored 2026-11-07
Fix Fixed AMD Ryzen™ 8000 Series Desktop Processors (AMD): AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (AMD): AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)+17 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMDAMD Ryzen™ 8000 Series Desktop Processors—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ Graphics—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ Graphics—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ 7000 Series Mobile Processors—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ Z1 Series Processors—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Ryzen™ Embedded 7000 Series Processors—whql-amd-software-adrenalin-edition-25.6.1-win10-win11-june5-rdna.exePatch availableCNA
AMDAMD Ryzen™ Embedded V2000 Series Processors—250306a-415645C.zipPatch availableCNA
AMDAMD Ryzen™ Embedded 8000 Series Processors—whql-amd-software-adrenalin-edition-25.6.1-win10-win11-june5-rdna.exePatch availableCNA
AMDAMD Radeon™ RX 5000 Series Graphics Products—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)Patch availableCNA
AMDAMD Radeon™ PRO W5000 Series Graphics Products—AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Radeon™ RX 6000 Series Graphics Products—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)Patch availableCNA
AMDAMD Radeon™ PRO W6000 Series Graphics Products—AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Radeon™ RX 7000 Series Graphics Products—AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)Patch availableCNA
AMDAMD Radeon™ PRO W7000 Series Graphics Products—AMD Software: PRO Edition 24.Q4 (24.20.30)Patch availableCNA
AMDAMD Radeon™ PRO V520 Graphics Products—Contact your AMD Customer Engineering representativePatch availableCNA
AMDAMD Radeon™ PRO V620 Graphics Products—Contact your AMD Customer Engineering representativePatch availableCNA
AMDAMD Radeon™ PRO V710 Graphics Products—Contact your AMD Customer Engineering representativePatch availableCNA
  • AMD Ryzen™ 8000 Series Desktop Processors VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ 7000 Series Mobile Processors VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ Z1 Series Processors VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Ryzen™ Embedded 7000 Series Processors VendorAMD Affected — Fixed in whql-amd-software-adrenalin-edition-25.6.1-win10-win11-june5-rdna.exe Patch available CNA
  • AMD Ryzen™ Embedded V2000 Series Processors VendorAMD Affected — Fixed in 250306a-415645C.zip Patch available CNA
  • AMD Ryzen™ Embedded 8000 Series Processors VendorAMD Affected — Fixed in whql-amd-software-adrenalin-edition-25.6.1-win10-win11-june5-rdna.exe Patch available CNA
  • AMD Radeon™ RX 5000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01) Patch available CNA
  • AMD Radeon™ PRO W5000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Radeon™ RX 6000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01) Patch available CNA
  • AMD Radeon™ PRO W6000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Radeon™ RX 7000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01) Patch available CNA
  • AMD Radeon™ PRO W7000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: PRO Edition 24.Q4 (24.20.30) Patch available CNA
  • AMD Radeon™ PRO V520 Graphics Products VendorAMD Affected — Fixed in Contact your AMD Customer Engineering representative Patch available CNA
  • AMD Radeon™ PRO V620 Graphics Products VendorAMD Affected — Fixed in Contact your AMD Customer Engineering representative Patch available CNA
  • AMD Radeon™ PRO V710 Graphics Products VendorAMD Affected — Fixed in Contact your AMD Customer Engineering representative Patch available CNA

Remediation

  • Fix · CNA AMD Ryzen™ 8000 Series Desktop Processors (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ 7000 Series Mobile Processors (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ Z1 Series Processors (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Ryzen™ Embedded 7000 Series Processors (AMD) Fixed in whql-amd-software-adrenalin-edition-25.6.1-win10-win11-june5-rdna.exe
  • Fix · CNA AMD Ryzen™ Embedded V2000 Series Processors (AMD) Fixed in 250306a-415645C.zip
  • Fix · CNA AMD Ryzen™ Embedded 8000 Series Processors (AMD) Fixed in whql-amd-software-adrenalin-edition-25.6.1-win10-win11-june5-rdna.exe
  • Fix · CNA AMD Radeon™ RX 5000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)
  • Fix · CNA AMD Radeon™ PRO W5000 Series Graphics Products (AMD) Fixed in AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Radeon™ RX 6000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)
  • Fix · CNA AMD Radeon™ PRO W6000 Series Graphics Products (AMD) Fixed in AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Radeon™ RX 7000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)
  • Fix · CNA AMD Radeon™ PRO W7000 Series Graphics Products (AMD) Fixed in AMD Software: PRO Edition 24.Q4 (24.20.30)
  • Fix · CNA AMD Radeon™ PRO V520 Graphics Products (AMD) Fixed in Contact your AMD Customer Engineering representative
  • Fix · CNA AMD Radeon™ PRO V620 Graphics Products (AMD) Fixed in Contact your AMD Customer Engineering representative
  • Fix · CNA AMD Radeon™ PRO V710 Graphics Products (AMD) Fixed in Contact your AMD Customer Engineering representative

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-0011
  2. 2026-10-03 Alias added: GHSA-m7mq-37p8-whp7

References

  • TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
  • TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
  • TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
  • TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
  • TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
  • TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
See all 508 →

Sources