Skip to contentAmd 3rd Gen Epyc vulnerabilities
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient input validation in the SMU may allow an attacker to improperly lock resources,...CVE-2023-205325.3 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address...CVE-2023-205317.5 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory...CVE-2023-205307.5 High
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bound checks in the SMU may allow an attacker to update the from/to address space to...CVE-2023-205297.5 High
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory...CVE-2023-205282.4 Low
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreImproper syscall input validation in the ASP Bootloader may allow a privileged attacker to read...CVE-2023-205276.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to...CVE-2023-205256.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreTOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially...CVE-2023-205235.7 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially...CVE-2023-205227.5 High
- amd 3rd gen epyc, milanpi-sp3 firmware +1 moreFailure to validate addresses provided by software to BIOS commands may result in a potential...CVE-2022-238145.3 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi-sp3 firmware +1 more +3 moreThe software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting...CVE-2022-238135.3 Medium
- amd 3rd gen epyc, milanpi firmware +1 moreInsufficient input validation during parsing of the System Management Mode (SMM) binary may allow...CVE-2021-467915.5 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +3 more +5 moreInsufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application...CVE-2021-467797.1 High
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds...CVE-2021-467685.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in the ASP may allow an attacker with physical access, unauthorized...CVE-2021-467676.1 Medium
- amd 3rd gen epyc, milanpi firmware +1 moreInsufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP)...CVE-2021-264097.8 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 7313 firmware +21 more +23 moreImproper input validation and bounds checking in SEV firmware may leak scratch buffer bytes...CVE-2021-264045.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox...CVE-2021-264027.1 High
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreInsufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or...CVE-2021-263987.8 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a...CVE-2021-263964.4 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient fencing and checks in System Management Unit (SMU) may result in access to invalid...CVE-2021-263555.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software...CVE-2021-263435.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreFailure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss...CVE-2021-263284.4 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 moreFailure to validate the communication buffer and communication service in the BIOS may allow an...CVE-2021-263167.8 High
- amd 3rd gen epyc, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreDue to a mishandled error, it is possible to leave the DRTM UApp in a partially initialized state...CVE-2021-263537.8 High
- amd 2nd gen epyc, 3rd gen epyc, ryzen 2000 series +189 more +191 morePotential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which...CVE-2021-392988.8 High