Skip to contentAmd Epyc 7401p Firmware vulnerabilities
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...CVE-2023-20592Fix available6.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon gold pro 3150g firmware +49 more +51 moreSpeculative LeaksCVE-2023-20588Fix availableEPSS 11.2%5.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +89 more +91 moreA potential power side-channel vulnerability in some AMD processors may allow an authenticated...CVE-2023-205756.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...CVE-2021-467569.1 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 moreInsufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD...CVE-2021-264067.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read...CVE-2021-263567.4 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 moreImproper access control settings in ASP
Bootloader may allow an attacker to corrupt the return...CVE-2023-205209.8 Critical
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreImproper syscall input validation in the ASP Bootloader may allow a privileged attacker to read...CVE-2023-205276.5 Medium
- amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 moreInsufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret...CVE-2021-264036.5 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreInsufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or...CVE-2021-263987.8 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 moreExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU...CVE-2021-467785.6 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 moreA potential vulnerability in some AMD processors using frequency scaling may allow an...CVE-2022-238236.5 Medium
- amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 moreAn attacker with access to a malicious hypervisor may be able to infer data values used in a SEV...CVE-2021-467446.5 Medium
- amd epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware +36 more +38 moreIn SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a...CVE-2021-263423.3 Low
- amd 1st gen amd epyc™, 2nd gen amd epyc™, epyc 7001 firmware +37 more +39 moreInsufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy...CVE-2021-264087.1 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreSome AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially...CVE-2021-263416.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreLFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.CVE-2021-26401Fix available5.6 Medium
- amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +105 more +107 moreAMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted...CVE-2020-129665.5 Medium
- amd epyc™, epyc 7001 firmware, epyc 7232p firmware +103 more +105 moreA malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES...CVE-2021-263408.4 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreAMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss...CVE-2021-263305.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreA side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI...CVE-2020-129545.5 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +58 more +60 moreAMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to...CVE-2021-263317.8 High
- amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 moreImproper input and range checking in the Platform Security Processor (PSP) boot loader image...CVE-2021-263357.8 High
- amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 moreRace condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations.CVE-2020-129517.0 High
- amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +59 more +61 moreA potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.CVE-2020-129887.5 High