Skip to contentAmd 2nd Gen Amd Epyc™ vulnerabilities
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +31 more +33 moreA heap overflow in SMM module may allow an attacker with access to a second vulnerability that...CVE-2023-205777.4 High
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +23 more +25 moreA potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ...CVE-2022-238298.2 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +5 more +7 moreImproper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI...CVE-2023-205877.1 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...CVE-2023-20592Fix available6.5 Medium
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 moreFailure to validate the value in APCB may allow a privileged attacker to tamper with the APCB...CVE-2021-263451.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 moreModerate: linux-firmware security updateCVE-2023-20593Public exploitFix available5.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +89 more +91 moreA potential power side-channel vulnerability in some AMD processors may allow an authenticated...CVE-2023-205756.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...CVE-2021-467569.1 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 moreInsufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD...CVE-2021-264067.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read...CVE-2021-263567.4 High
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreAn attacker with a compromised ASP could
possibly send malformed commands to an ASP on another...CVE-2023-205247.5 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 moreImproper access control settings in ASP
Bootloader may allow an attacker to corrupt the return...CVE-2023-205209.8 Critical
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper input validation in ABL may enable an
attacker with physical access, to perform...CVE-2021-467756.8 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to...CVE-2021-467698.8 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory...CVE-2021-467647.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient input validation in the SMU may
enable a privileged attacker to write beyond the...CVE-2021-467637.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc™ embedded 7002 +49 more +51 moreInsufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially...CVE-2021-467623.9 Low
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU...CVE-2021-263799.8 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors +174 more +176 moreWhen SMT is enabled, certain AMD processors may speculatively execute instructions using a target...CVE-2022-27672Fix available4.7 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +48 more +50 moreImproper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and...CVE-2021-263707.1 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, epyc 7001 firmware +37 more +39 moreInsufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy...CVE-2021-264087.1 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreAMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss...CVE-2021-263305.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +44 more +46 moreA potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an...CVE-2020-129617.8 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreA side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI...CVE-2020-129545.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreAMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to...CVE-2021-263317.8 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 moreInsufficient ID command validation in the SEV Firmware may allow a local authenticated attacker...CVE-2021-263215.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 moreInsufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV...CVE-2021-263205.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 morePersistent platform private key may not be protected with a random IV leading to a potential “two...CVE-2021-263227.5 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 moreAMD System Management Unit (SMU) may experience an integer overflow when an invalid length is...CVE-2021-263295.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +43 more +45 moreImproper access controls in System Management Unit (SMU) may allow for an attacker to override...CVE-2021-263387.5 High