Skip to contentAmd Processors vulnerabilities
- amd athlon™ 3000 series desktop processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +29 more +31 moreA transient execution vulnerability in some AMD processors may allow a user process to infer the...CVE-2024-363483.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ embedded 3000 series processors +35 more +37 moreA transient execution vulnerability in some AMD processors may allow a user process to infer...CVE-2024-363493.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series +43 more +45 moreImproper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with...CVE-2024-36347Fix available6.4 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors, epyc™ embedded 7002 series processors +7 more +9 moreImproper register access control in ASP may allow a privileged attacker to perform unauthorized...CVE-2023-205997.9 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520, radeon™ pro v620 +26 more +28 moreInsufficient clearing of GPU global memory could allow a malicious process running on the same...CVE-2024-363536.5 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +29 more +31 moreImproper input validation in AMD Crash Defender could allow an attacker to provide the Windows®...CVE-2024-219715.5 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors, epyc™ 9004 processors +22 more +24 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313457.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi300a +22 more +24 moreImproper access control in the ASP could allow a privileged attacker to perform an out-of-bounds...CVE-2023-205085.0 Medium
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreA bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory,...CVE-2023-313526.0 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313437.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313427.5 High
- amd ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processor with radeon™ graphics +11 more +13 moreImproper access control in the DRTM firmware could allow a privileged attacker to perform...CVE-2023-313313.0 Low
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreImproper handling of invalid nested page table entries in the IOMMU may allow a privileged...CVE-2023-205825.3 Medium
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreImproper access control in the IOMMU may allow a privileged attacker to bypass RMP checks,...CVE-2023-205812.5 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper access control in the fTPM driver in the trusted OS could allow a privileged attacker to...CVE-2023-205155.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +12 more +14 moreAn integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...CVE-2023-205072.3 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +25 more +27 moreSMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally...CVE-2024-01798.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +34 more +36 moreImproper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to...CVE-2024-219258.2 High
- amd epyc™ 7002 processors, epyc™ embedded 7002 processors, ryzen™ threadripper™ pro 3000wx series processors +2 more +4 moreSMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...CVE-2024-219248.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access...CVE-2024-219815.7 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc™ embedded 7003 +1 more +3 moreIncomplete system memory cleanup in SEV firmware could
allow a privileged attacker to corrupt...CVE-2023-31356Fix available4.4 Medium
- amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 moreImproper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform...CVE-2023-205916.5 Medium
- amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 moreIOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs),...CVE-2023-20584Fix available5.3 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors +23 more +25 moreIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker...CVE-2023-205181.9 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210, instinct™ mi250 +38 more +40 moreInsufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA...CVE-2022-238177.3 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzentm embedded r1000 +23 more +25 moreImproper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write...CVE-2022-238157.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors +24 more +26 moreInsufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS...CVE-2021-467723.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...CVE-2021-467465.2 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +28 more +30 moreInsufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD...CVE-2021-263873.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro w6000 series graphics cards +48 more +50 moreA malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow...CVE-2021-263675.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2024-21980Public exploit7.9 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 moreImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite...CVE-2024-21978Public exploit6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 moreImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to...CVE-2023-31355Public exploit6.0 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +23 more +25 moreA potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ...CVE-2022-238298.2 High
- amd ryzen™ 3000 series processors with radeon™ graphics, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +140 more +142 moreImproper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel...CVE-2023-205796.0 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +5 more +7 moreImproper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI...CVE-2023-205877.1 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreDue to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...CVE-2023-313474.9 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreFailure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data...CVE-2023-31346Public exploitFix available6.0 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 moreDebug Exception Delivery in Secure Nested PagingCVE-2023-20573Public exploit3.2 Low
- amd ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7035 series processors with radeon™ graphics “rembrandt-r”, ryzen 3 5125c firmware +68 more +70 moreImproper input validation in the SMM Supervisor may allow an attacker with a compromised SMI...CVE-2023-205969.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreA race condition in System Management Mode (SMM) code may allow an attacker using a compromised...CVE-2023-205718.1 High
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...CVE-2023-205657.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +92 more +94 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...CVE-2023-205637.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...CVE-2022-238219.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +67 more +69 moreInsufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may...CVE-2021-467586.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...CVE-2023-20592Fix available6.5 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 moreImproper address validation in ASP with SNP enabled may potentially allow an attacker to...CVE-2023-205665.3 Medium
- Show moreLoading…