PT-2026-41247 · Amd · Platform Management Framework

Published 2026-05-15 · Updated 2026-05-15 · CVE-2025-29935

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AMD Platform Management Framework (affected versions not specified)

Description An out of bounds write—a condition where data is written outside the intended memory boundary—within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege level. This may lead to a loss of confidentiality, integrity, or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-29935

Affected Products

Platform Management Framework

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-29935 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html · Note
• https://twitter.com/VulmonFeeds/status/2055182935779639559 · Twitter Post
• https://t.me/CVEtracker/53862 · Telegram Post