AMD Processor Platform Vulnerability CVE Advisory and Firmware Fix Guide

Vulnerability Overview AMD disclosed multiple potential vulnerabilities affecting its client processor platforms in a security advisory released in August 2025. These vulnerabilities may affect SMM, ASP, and other platform components, posing a risk of exploitation. Affected Scope AMD Athlon™ Mobile Processors AMD Ryzen™ Mobile Processors AMD Ryzen™ Desktop Processors Remediation AMD recommends updating to specified Platform Initiation (PI) firmware versions to resolve these vulnerabilities. The specific firmware versions and release dates are as follows: AMD Athlon™ Mobile Processors Program: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Dali" - CVE: CVE-2021-26377, CVE-2021-46750 - Fix Version: PicassoPi-FP5 1.0.0.E - Date Fix Released: 2022-07-29 Program: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Picasso" - CVE: CVE-2024-36354 - Fix Version: PicassoPi-FP5 1.0.1.2a - Date Fix Released: 2024-10-11 Program: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Pollock" - CVE: CVE-2024-36354 - Fix Version: PollockPi-FT5 1.0.0.8a - Date Fix Released: 2024-10-11 AMD Ryzen™ Mobile Processors Program: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics - Former Codename: "Barcelo" - CVE: CVE-2023-31330, CVE-2024-36354 - Fix Version: Cezanne-FP6 1.0.1.1a - Date Fix Released: 2024-10-31 Program: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Cezanne" - CVE: CVE-2023-31330, CVE-2024-36354 - Fix Version: Cezanne-FP6 1.0.1.1a - Date Fix Released: 2024-10-31 Program: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Lucienne" - CVE: CVE-2023-31330, CVE-2024-36354 - Fix Version: Cezanne-FP6 1.0.1.1a - Date Fix Released: 2024-10-31 Program: AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics - Former Codename: "Barcelo R" - CVE: CVE-2023-31330, CVE-2024-36354 - Fix Version: Cezanne-FP6 1.0.1.1a - Date Fix Released: 2024-10-31 Program: AMD Ryzen™ 2000 Series Mobile Processors - Former Codename: "Raven Ridge" - CVE: CVE-2021-26377, CVE-2021-46750 - Fix Version: Raven-FP5-AM4 1.1.0.F, PinnaclePi-AM4 1.0.0.D, ComboAM4MPI 1.0.0.9, ComboAM4v2 Pi 1.2.0.8 - Date Fix Released: 2022-07-29 Program: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Renoir" - CVE: CVE-2023-31330, CVE-2024-36354 - Fix Version: Renoir-FP6 1.0.0.8a - Date Fix Released: 2024-09-19 Program: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics - Former Codename: "Rembrandt" - CVE: CVE-2024-36354 - Fix Version: RembrandtPi-FP7 1.0.0.8a - Date Fix Released: 2024-09-11 Program: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics - Former Codename: "Mendocino" - CVE: CVE-2023-20572, CVE-2023-31326, CVE-2023-31330, CVE-2024-21947, CVE-2024-21970 - Fix Version: MendocinoPi-FT6 1.0.0.6 - Date Fix Released: 2024-01-03 Program: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Phoenix" - CVE: CVE-2024-36326, CVE-2024-21977 - Fix Version: PhoenixPi-FP8-FP7 1.1.0.3 - Date Fix Released: 2024-12-21 Program: AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Hawk Point" - CVE: CVE-2024-21977 - Fix Version: PhoenixPi-FP8-FP7 1.1.0.3 - Date Fix Released: 2024-09-20 Program: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics - Former Codename: "Dragon Range" - CVE: CVE-2024-36354, CVE-2024-21977, CVE-2024-21947, CVE-2024-21970, CVE-2023-31330 - Fix Version: DragonRangeF1.1Pi 1.0.0.3f, DragonRangeF1.1Pi 1.0.0.3d, DragonRangeF1.1Pi 1.0.0.3c - Date Fix Released: 2024-10-25, 2024-07-31, 2024-01-02, 2024-01-29, 2024-12-16 Program: AMD Ryzen™ AI 300 Series - Former Codename: "StrixKrakan" - CVE: CVE-2024-36326 - Fix Version: StrixKrakanPi-FP8 1.1.0.0 - Date Fix Released: 2024-12-16 AMD Ryzen™ Desktop Processors Program: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics - Former Codename: "Picasso" - CVE: CVE-2021-26377, CVE-2021-46750 - Fix Version: ComboAM4v2 Pi 1.2.0.8 - Date Fix Released: 2022-07-29 Program: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics - Former Codename: "Picasso" - CVE: CVE-2024-21947, CVE-2024-36354 - Fix Version: ComboAM4v2Pi 1.2.0.0, ComboAM4MPI 1.0.0.C - Date Fix Released: 2024-03-14, 2024-10-17 Program: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics - Former Codename: "Picasso" - CVE: CVE-2023-20572, CVE-2024-21947 - Fix Version: ComboAM4v2Pi 1.2.0.0, ComboAM4 1.0.0.8 - Date Fix Released: 2024-03-14, 2024-03-20 Program: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics - Former Codename: "Picasso" - CVE: CVE-2021-26377, CVE-2021-46750 - Fix Version: ComboAM4MPI 1.0.0.9 - Date Fix Released: 2022-07-29 Additional Information AMD ID: AMD-SB-4012 Potential Impact: Refer to the CVE Details section Notes Products not considered affected by the listed CVEs are not included in the list abo

Goal Reached Thanks to every supporter — we hit 100%!

AMD Processor Platform Vulnerability CVE Advisory and Firmware Fix Guide