Executive brief
A security vulnerability exists in the AMD Sensor Fusion Hub Driver, which manages motion and environmental sensors on AMD-powered devices. A local user with limited privileges could exploit this flaw to crash the system or cause a denial of service. This could disrupt business operations and lead to unscheduled downtime for affected laptops or workstations.
Technical details
A classic buffer overflow (CWE-120) exists in the AMD Sensor Fusion Hub Driver due to insufficient input size validation. A local attacker with low privileges (PR:L) can trigger an out-of-bounds write by providing crafted input to the driver. This memory corruption can be leveraged to cause a kernel-level denial of service (system crash). The vulnerability is tracked as CVE-2025-29944 and was disclosed by AMD in bulletin AMD-SB-4015.
Affected products
- AMD Sensor Fusion Hub Driver
Timeline
- 2026-05-15: disclosed: Initial disclosure by AMD and NVD publication.