Amd Epyc 7002 Firmware vulnerabilities

• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 more A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read... CVE-2021-26356 7.4 HighMay 9, 2023
• amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 more Insufficient bounds checking in ASP may allow an attacker to issue a system call from a... CVE-2021-26354 5.5 MediumMay 9, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow an attacker to improperly lock resources,... CVE-2023-20532 5.3 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address... CVE-2023-20531 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to... CVE-2023-20529 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory... CVE-2023-20528 2.4 LowJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read... CVE-2023-20527 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to... CVE-2023-20525 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially... CVE-2023-20523 5.7 MediumJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 more Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret... CVE-2021-26403 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox... CVE-2021-26402 7.1 HighJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or... CVE-2021-26398 7.8 HighJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 more Failure to validate the communication buffer and communication service in the BIOS may allow an... CVE-2021-26316 7.8 HighJanuary 10, 2023
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 more IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets... CVE-2022-23824 Fix available 5.5 MediumNovember 9, 2022
• amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 more Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU... CVE-2021-46778 5.6 MediumAugust 9, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 more Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type... CVE-2022-23825 Fix available 6.5 MediumJuly 12, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more AMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to... CVE-2022-29900 Public exploitFix available 6.5 MediumJuly 12, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 more A potential vulnerability in some AMD processors using frequency scaling may allow an... CVE-2022-23823 6.5 MediumJune 15, 2022
• amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 more An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV... CVE-2021-46744 6.5 MediumMay 11, 2022
• amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 more TOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a... CVE-2021-26347 4.7 MediumMay 11, 2022
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +48 more +50 more Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and... CVE-2021-26370 7.1 HighMay 10, 2022
• amd 1st gen amd epyc™, 2nd gen amd epyc™, epyc 7001 firmware +37 more +39 more Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy... CVE-2021-26408 7.1 HighMay 10, 2022
• amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +105 more +107 more AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted... CVE-2020-12966 5.5 MediumFebruary 4, 2022
• amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 more Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read... CVE-2021-26337 5.5 MediumNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 more AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss... CVE-2021-26330 5.5 MediumNovember 16, 2021
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +44 more +46 more A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an... CVE-2020-12961 7.8 HighNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 more A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI... CVE-2020-12954 5.5 MediumNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 more AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to... CVE-2021-26331 7.8 HighNovember 16, 2021
• amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 more Improper input and range checking in the Platform Security Processor (PSP) boot loader image... CVE-2021-26335 7.8 HighNovember 16, 2021
• amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 more Race condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations. CVE-2020-12951 7.0 HighNovember 16, 2021
• amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +94 more +96 more Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses... CVE-2021-26336 5.5 MediumNovember 16, 2021
• amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +59 more +61 more A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted. CVE-2020-12988 7.5 HighJune 11, 2021