Amd Epyc 7003 Firmware vulnerabilities

• amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 more Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform... CVE-2023-20591 6.5 MediumAugust 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2024-21980 Public exploit 7.9 HighAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite... CVE-2024-21978 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 more Improper initialization of variables in the DXE driver may allow a privileged user to leak... CVE-2023-20594 4.4 MediumSeptember 20, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 more Insufficient bounds checking in ASP may allow an attacker to issue a system call from a... CVE-2021-26354 5.5 MediumMay 9, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow an attacker to improperly lock resources,... CVE-2023-20532 5.3 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address... CVE-2023-20531 7.5 HighJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory... CVE-2023-20530 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to... CVE-2023-20529 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory... CVE-2023-20528 2.4 LowJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read... CVE-2023-20527 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to... CVE-2023-20525 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially... CVE-2023-20523 5.7 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 7313 firmware +21 more +23 more Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes... CVE-2021-26404 5.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox... CVE-2021-26402 7.1 HighJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or... CVE-2021-26398 7.8 HighJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a... CVE-2021-26396 4.4 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid... CVE-2021-26355 5.5 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software... CVE-2021-26343 5.5 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss... CVE-2021-26328 4.4 MediumJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 more Failure to validate the communication buffer and communication service in the BIOS may allow an... CVE-2021-26316 7.8 HighJanuary 10, 2023
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 more IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets... CVE-2022-23824 Fix available 5.5 MediumNovember 9, 2022
• amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 more Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU... CVE-2021-46778 5.6 MediumAugust 9, 2022
• amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 more An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV... CVE-2021-46744 6.5 MediumMay 11, 2022
• amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +105 more +107 more AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted... CVE-2020-12966 5.5 MediumFebruary 4, 2022
• amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 more Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read... CVE-2021-26337 5.5 MediumNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 more AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss... CVE-2021-26330 5.5 MediumNovember 16, 2021
• amd 3rd gen amd epyc™, epyc 7003 firmware, epyc 72f3 firmware +18 more +20 more Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of... CVE-2021-26327 5.5 MediumNovember 16, 2021
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +44 more +46 more A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an... CVE-2020-12961 7.8 HighNovember 16, 2021
• amd 3rd gen amd epyc™, epyc 7003 firmware, epyc 72f3 firmware +18 more +20 more When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently... CVE-2021-26315 7.8 HighNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 more A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI... CVE-2020-12954 5.5 MediumNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 more AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to... CVE-2021-26331 7.8 HighNovember 16, 2021
• amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 more Improper input and range checking in the Platform Security Processor (PSP) boot loader image... CVE-2021-26335 7.8 HighNovember 16, 2021
• amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 more Race condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations. CVE-2020-12951 7.0 HighNovember 16, 2021
• amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +94 more +96 more Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses... CVE-2021-26336 5.5 MediumNovember 16, 2021
• amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +59 more +61 more A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted. CVE-2020-12988 7.5 HighJune 11, 2021