Skip to contentAmd Epyc 7303 Firmware vulnerabilities
- amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 moreImproper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform...CVE-2023-205916.5 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 moreIOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs),...CVE-2023-20584Fix available5.3 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2024-21980Public exploit7.9 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...CVE-2024-21978Public exploit6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2023-31355Public exploit6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreDue to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...CVE-2023-313474.9 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreFailure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data...CVE-2023-31346Public exploitFix available6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 moreDebug Exception Delivery in Secure Nested PagingCVE-2023-20573Public exploit3.2 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...CVE-2023-20592Fix available6.5 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 moreImproper address validation in ASP with SNP enabled may potentially allow an attacker to...CVE-2023-205665.3 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 moreSMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential...CVE-2022-238301.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 moreFailure to validate the value in APCB may allow a privileged attacker to tamper with the APCB...CVE-2021-263451.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium