Amd Epyc 7203 Firmware vulnerabilities

• amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 more Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform... CVE-2023-20591 6.5 MediumAugust 13, 2024
• amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 more IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs),... CVE-2023-20584 Fix available 5.3 MediumAugust 13, 2024
• amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 more A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and... CVE-2023-20578 7.5 HighAugust 13, 2024
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 more An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow... CVE-2021-26344 7.2 HighAugust 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2024-21980 Public exploit 7.9 HighAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite... CVE-2024-21978 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2023-31355 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 more Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause... CVE-2023-31347 4.9 MediumFebruary 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 more Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data... CVE-2023-31346 Public exploitFix available 6.0 MediumFebruary 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 more Debug Exception Delivery in Secure Nested Paging CVE-2023-20573 Public exploit 3.2 LowJanuary 11, 2024
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 more Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker... CVE-2023-20592 Fix available 6.5 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 more Improper address validation in ASP with SNP enabled may potentially allow an attacker to... CVE-2023-20566 5.3 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 more SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential... CVE-2022-23830 1.9 LowNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 more Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB... CVE-2021-26345 1.9 LowNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2023-20533 6.1 MediumNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 more Insufficient input validation in the ASP Bootloader may enable a privileged attacker with... CVE-2023-20526 1.9 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 more TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM... CVE-2023-20521 3.3 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2021-46774 6.7 MediumNovember 14, 2023