Amd Epyc 7663 Firmware vulnerabilities

• amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 more Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform... CVE-2023-20591 6.5 MediumAugust 13, 2024
• amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 more IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs),... CVE-2023-20584 Fix available 5.3 MediumAugust 13, 2024
• amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 more A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and... CVE-2023-20578 7.5 HighAugust 13, 2024
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 more An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow... CVE-2021-26344 7.2 HighAugust 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2024-21980 Public exploit 7.9 HighAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite... CVE-2024-21978 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2023-31355 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 more Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause... CVE-2023-31347 4.9 MediumFebruary 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 more Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data... CVE-2023-31346 Public exploitFix available 6.0 MediumFebruary 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 more Debug Exception Delivery in Secure Nested Paging CVE-2023-20573 Public exploit 3.2 LowJanuary 11, 2024
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 more Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker... CVE-2023-20592 Fix available 6.5 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 more Improper address validation in ASP with SNP enabled may potentially allow an attacker to... CVE-2023-20566 5.3 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 more SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential... CVE-2022-23830 1.9 LowNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 more Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB... CVE-2021-26345 1.9 LowNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2023-20533 6.1 MediumNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 more Insufficient input validation in the ASP Bootloader may enable a privileged attacker with... CVE-2023-20526 1.9 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 more TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM... CVE-2023-20521 3.3 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2021-46774 6.7 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 more Improper initialization of variables in the DXE driver may allow a privileged user to leak... CVE-2023-20594 4.4 MediumSeptember 20, 2023
• ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 more A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the... CVE-2023-20569 Fix available 4.7 MediumAugust 8, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +89 more +91 more A potential power side-channel vulnerability in some AMD processors may allow an authenticated... CVE-2023-20575 6.5 MediumJuly 11, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 more Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)... CVE-2021-46756 9.1 CriticalMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 more A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read... CVE-2021-26356 7.4 HighMay 9, 2023
• amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 more Insufficient bounds checking in ASP may allow an attacker to issue a system call from a... CVE-2021-26354 5.5 MediumMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more An attacker with a compromised ASP could possibly send malformed commands to an ASP on another... CVE-2023-20524 7.5 HighMay 9, 2023
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 more Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return... CVE-2023-20520 9.8 CriticalMay 9, 2023
• amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 more Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to... CVE-2022-23818 7.5 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Improper input validation in ABL may enable an attacker with physical access, to perform... CVE-2021-46775 6.8 MediumMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to... CVE-2021-46769 8.8 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory... CVE-2021-46764 7.5 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Insufficient input validation in the SMU may enable a privileged attacker to write beyond the... CVE-2021-46763 7.5 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc™ embedded 7002 +49 more +51 more Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially... CVE-2021-46762 3.9 LowMay 9, 2023
• amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 more Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt... CVE-2021-26397 7.1 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU... CVE-2021-26379 9.8 CriticalMay 9, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow an attacker to improperly lock resources,... CVE-2023-20532 5.3 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address... CVE-2023-20531 7.5 HighJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory... CVE-2023-20530 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to... CVE-2023-20529 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory... CVE-2023-20528 2.4 LowJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read... CVE-2023-20527 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to... CVE-2023-20525 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially... CVE-2023-20523 5.7 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 7313 firmware +21 more +23 more Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes... CVE-2021-26404 5.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox... CVE-2021-26402 7.1 HighJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or... CVE-2021-26398 7.8 HighJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a... CVE-2021-26396 4.4 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid... CVE-2021-26355 5.5 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software... CVE-2021-26343 5.5 MediumJanuary 10, 2023
• amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 more Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss... CVE-2021-26328 4.4 MediumJanuary 10, 2023
• Show olderLoading…