Amd Epyc 7f72 Firmware vulnerabilities

• amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 more A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and... CVE-2023-20578 7.5 HighAugust 13, 2024
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 more An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow... CVE-2021-26344 7.2 HighAugust 13, 2024
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 more Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker... CVE-2023-20592 Fix available 6.5 MediumNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 more Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB... CVE-2021-26345 1.9 LowNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2023-20533 6.1 MediumNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 more Insufficient input validation in the ASP Bootloader may enable a privileged attacker with... CVE-2023-20526 1.9 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 more TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM... CVE-2023-20521 3.3 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2021-46774 6.7 MediumNovember 14, 2023
• debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 more Moderate: linux-firmware security update CVE-2023-20593 Public exploitFix available 5.5 MediumJuly 24, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +89 more +91 more A potential power side-channel vulnerability in some AMD processors may allow an authenticated... CVE-2023-20575 6.5 MediumJuly 11, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 more Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)... CVE-2021-46756 9.1 CriticalMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 more Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD... CVE-2021-26406 7.5 HighMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 more A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read... CVE-2021-26356 7.4 HighMay 9, 2023
• amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 more Insufficient bounds checking in ASP may allow an attacker to issue a system call from a... CVE-2021-26354 5.5 MediumMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more An attacker with a compromised ASP could possibly send malformed commands to an ASP on another... CVE-2023-20524 7.5 HighMay 9, 2023
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 more Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return... CVE-2023-20520 9.8 CriticalMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Improper input validation in ABL may enable an attacker with physical access, to perform... CVE-2021-46775 6.8 MediumMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to... CVE-2021-46769 8.8 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory... CVE-2021-46764 7.5 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Insufficient input validation in the SMU may enable a privileged attacker to write beyond the... CVE-2021-46763 7.5 HighMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc™ embedded 7002 +49 more +51 more Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially... CVE-2021-46762 3.9 LowMay 9, 2023
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 more Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU... CVE-2021-26379 9.8 CriticalMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors +174 more +176 more When SMT is enabled, certain AMD processors may speculatively execute instructions using a target... CVE-2022-27672 Fix available 4.7 MediumFebruary 14, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow an attacker to improperly lock resources,... CVE-2023-20532 5.3 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address... CVE-2023-20531 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to... CVE-2023-20529 7.5 HighJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory... CVE-2023-20528 2.4 LowJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read... CVE-2023-20527 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to... CVE-2023-20525 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially... CVE-2023-20523 5.7 MediumJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 more Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret... CVE-2021-26403 6.5 MediumJanuary 10, 2023
• amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 more Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox... CVE-2021-26402 7.1 HighJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or... CVE-2021-26398 7.8 HighJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 more Failure to validate the communication buffer and communication service in the BIOS may allow an... CVE-2021-26316 7.8 HighJanuary 10, 2023
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 more IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets... CVE-2022-23824 Fix available 5.5 MediumNovember 9, 2022
• amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 more Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU... CVE-2021-46778 5.6 MediumAugust 9, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 more Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type... CVE-2022-23825 Fix available 6.5 MediumJuly 12, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more AMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to... CVE-2022-29900 Public exploitFix available 6.5 MediumJuly 12, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 more A potential vulnerability in some AMD processors using frequency scaling may allow an... CVE-2022-23823 6.5 MediumJune 15, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +106 more +108 more Improper validation of the BIOS directory may allow for searches to read beyond the directory... CVE-2021-26388 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 more Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling... CVE-2021-26376 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 more Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage... CVE-2021-26373 5.5 MediumMay 11, 2022
• amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 more Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially... CVE-2021-26364 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 more Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid... CVE-2021-26378 5.5 MediumMay 11, 2022
• amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 more TOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a... CVE-2021-26347 4.7 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 more Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in... CVE-2021-26375 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +44 more +46 more Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in... CVE-2021-26372 5.5 MediumMay 11, 2022
• amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 more A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a... CVE-2021-26350 4.7 MediumMay 11, 2022
• amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +48 more +50 more Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and... CVE-2021-26370 7.1 HighMay 10, 2022
• Show olderLoading…