PT-2026-41248 · Amd · Platform Management Framework

CVE-2025-29936 · Published 2026-05-15 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AMD Platform Management Framework (affected versions not specified)

Description Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages. This issue may impact integrity and availability or enable privilege escalation, potentially resulting in a loss of confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-29936

Affected Products

Platform Management Framework

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-29936 · Security Note
• https://t.me/CVEtracker/53863 · Telegram Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html · Note
• https://twitter.com/VulmonFeeds/status/2055180376075534471 · Twitter Post