Skip to contentAmd Epyc vulnerabilities
- amd 2nd gen epyc, 3rd gen epyc, milanpi-sp3 firmware +1 more +3 moreThe software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting...CVE-2022-238135.3 Medium
- amd 3rd gen epyc, milanpi firmware +1 moreInsufficient input validation during parsing of the System Management Mode (SMM) binary may allow...CVE-2021-467915.5 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +3 more +5 moreInsufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application...CVE-2021-467797.1 High
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds...CVE-2021-467685.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in the ASP may allow an attacker with physical access, unauthorized...CVE-2021-467676.1 Medium
- amd 3rd gen epyc, milanpi firmware +1 moreInsufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP)...CVE-2021-264097.8 High
- amd 2nd gen epyc, romepi firmware +1 moreA randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key...CVE-2021-264075.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 7313 firmware +21 more +23 moreImproper input validation and bounds checking in SEV firmware may leak scratch buffer bytes...CVE-2021-264045.5 Medium
- amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 moreInsufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret...CVE-2021-264036.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox...CVE-2021-264027.1 High
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreInsufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or...CVE-2021-263987.8 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a...CVE-2021-263964.4 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient fencing and checks in System Management Unit (SMU) may result in access to invalid...CVE-2021-263555.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software...CVE-2021-263435.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreFailure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss...CVE-2021-263284.4 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 moreFailure to validate the communication buffer and communication service in the BIOS may allow an...CVE-2021-263167.8 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 moreExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU...CVE-2021-467785.6 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 moreA potential vulnerability in some AMD processors using frequency scaling may allow an...CVE-2022-238236.5 Medium
- amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 moreAn attacker with access to a malicious hypervisor may be able to infer data values used in a SEV...CVE-2021-467446.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +106 more +108 moreImproper validation of the BIOS directory may allow for searches to read beyond the directory...CVE-2021-263885.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling...CVE-2021-263765.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 moreInsufficient bound checks in the System Management Unit (SMU) may result in a system voltage...CVE-2021-263735.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU)...CVE-2021-263485.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreInsufficient bounds checking in an SMU mailbox register could allow an attacker to potentially...CVE-2021-263645.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest...CVE-2021-263495.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient bound checks in the System Management Unit (SMU) may result in access to an invalid...CVE-2021-263785.5 Medium
- amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 moreTOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a...CVE-2021-263474.7 Medium
- amd epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware +36 more +38 moreIn SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a...CVE-2021-263423.3 Low
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in...CVE-2021-263755.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +44 more +46 moreInsufficient bound checks related to PCIE in the System Management Unit (SMU) may result in...CVE-2021-263725.5 Medium
- amd athlon™ series, epyc 72f3 firmware, epyc 7313 firmware +84 more +86 moreA bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged...CVE-2021-263395.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreA TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...CVE-2021-263504.7 Medium
- amd 3rd gen epyc, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreDue to a mishandled error, it is possible to leave the DRTM UApp in a partially initialized state...CVE-2021-263537.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may...CVE-2021-467717.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreA bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.CVE-2021-263247.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreFailure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of...CVE-2021-263327.1 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +48 more +50 moreImproper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and...CVE-2021-263707.1 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, epyc 7001 firmware +37 more +39 moreInsufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy...CVE-2021-264087.1 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreSome AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially...CVE-2021-263416.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreLFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.CVE-2021-26401Fix available5.6 Medium
- amd 2nd gen epyc, 3rd gen epyc, ryzen 2000 series +189 more +191 morePotential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which...CVE-2021-392988.8 High
- amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +105 more +107 moreAMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted...CVE-2020-129665.5 Medium
- amd epyc™, epyc 7001 firmware, epyc 7232p firmware +103 more +105 moreA malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES...CVE-2021-263408.4 High
- amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read...CVE-2021-263375.5 Medium
- amd 3rd gen amd epyc™, epyc 7232p firmware, epyc 72f3 firmware +18 more +20 moreInsufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort...CVE-2021-263255.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreAMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss...CVE-2021-263305.5 Medium
- amd 3rd gen amd epyc™, epyc 7003 firmware, epyc 72f3 firmware +18 more +20 moreInsufficient validation of guest context in the SNP Firmware could lead to a potential loss of...CVE-2021-263275.5 Medium
- Show moreLoading…