Skip to contentAmd Epyc 7473x Firmware vulnerabilities
- amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 moreImproper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform...CVE-2023-205916.5 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 moreIOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs),...CVE-2023-20584Fix available5.3 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2024-21980Public exploit7.9 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...CVE-2024-21978Public exploit6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2023-31355Public exploit6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreDue to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...CVE-2023-313474.9 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreFailure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data...CVE-2023-31346Public exploitFix available6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 moreDebug Exception Delivery in Secure Nested PagingCVE-2023-20573Public exploit3.2 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...CVE-2023-20592Fix available6.5 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 moreImproper address validation in ASP with SNP enabled may potentially allow an attacker to...CVE-2023-205665.3 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 moreSMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential...CVE-2022-238301.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 moreFailure to validate the value in APCB may allow a privileged attacker to tamper with the APCB...CVE-2021-263451.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +89 more +91 moreA potential power side-channel vulnerability in some AMD processors may allow an authenticated...CVE-2023-205756.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...CVE-2021-467569.1 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read...CVE-2021-263567.4 High
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreAn attacker with a compromised ASP could
possibly send malformed commands to an ASP on another...CVE-2023-205247.5 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 moreImproper access control settings in ASP
Bootloader may allow an attacker to corrupt the return...CVE-2023-205209.8 Critical
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient input validation on the model
specific register: VM_HSAVE_PA may potentially lead to...CVE-2022-238187.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper input validation in ABL may enable an
attacker with physical access, to perform...CVE-2021-467756.8 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to...CVE-2021-467698.8 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory...CVE-2021-467647.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient input validation in the SMU may
enable a privileged attacker to write beyond the...CVE-2021-467637.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc™ embedded 7002 +49 more +51 moreInsufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially...CVE-2021-467623.9 Low
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient address validation, may allow an
attacker with a compromised ABL and UApp to corrupt...CVE-2021-263977.1 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU...CVE-2021-263799.8 Critical
- amd 3rd gen epyc, epyc 7003 firmware, epyc 7313 firmware +21 more +23 moreImproper input validation and bounds checking in SEV firmware may leak scratch buffer bytes...CVE-2021-264045.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 moreExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU...CVE-2021-467785.6 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +106 more +108 moreImproper validation of the BIOS directory may allow for searches to read beyond the directory...CVE-2021-263885.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling...CVE-2021-263765.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 moreInsufficient bound checks in the System Management Unit (SMU) may result in a system voltage...CVE-2021-263735.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU)...CVE-2021-263485.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreInsufficient bounds checking in an SMU mailbox register could allow an attacker to potentially...CVE-2021-263645.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest...CVE-2021-263495.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient bound checks in the System Management Unit (SMU) may result in access to an invalid...CVE-2021-263785.5 Medium
- amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 moreTOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a...CVE-2021-263474.7 Medium
- amd epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware +36 more +38 moreIn SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a...CVE-2021-263423.3 Low
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in...CVE-2021-263755.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +44 more +46 moreInsufficient bound checks related to PCIE in the System Management Unit (SMU) may result in...CVE-2021-263725.5 Medium
- amd athlon™ series, epyc 72f3 firmware, epyc 7313 firmware +84 more +86 moreA bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged...CVE-2021-263395.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreA TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...CVE-2021-263504.7 Medium
- Show olderLoading…