Skip to contentAmd Ryzen™ 2000 Series Desktop Processors “raven Ridge” Am4 vulnerabilities
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in...CVE-2021-467947.5 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious...CVE-2021-467925.9 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 1200 \(af\) firmware +72 more +74 moreInsufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory,...CVE-2021-467738.8 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +62 more +64 moreImproper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an...CVE-2021-467596.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...CVE-2021-467569.1 Critical
- amd ryzen™ embedded r1000, ryzen™ embedded r2000, ryzen™ embedded v1000 +66 more +68 moreInsufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker...CVE-2021-467549.1 Critical
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +73 more +75 moreFailure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers...CVE-2021-467539.1 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 moreInsufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD...CVE-2021-264067.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 3015ce firmware, 3015e firmware, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +61 more +63 moreCertain size values in firmware binary headers
could trigger out of bounds reads during signature...CVE-2021-263658.2 High
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium