Amd Ryzen Threadripper Pro 5995wx vulnerabilities

• amd athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210, instinct™ mi250 +38 more +40 more Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA... CVE-2022-23817 7.3 HighAugust 13, 2024
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +23 more +25 more A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ... CVE-2022-23829 8.2 HighJune 18, 2024
• ryzen™ pro 5000 series desktop processors, amd 4700s firmware, athlon gold 3150c firmware +142 more +144 more fTPM Voltage Fault Injection CVE-2023-20589 6.8 MediumAugust 8, 2023
• ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 more A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the... CVE-2023-20569 Fix available 4.7 MediumAugust 8, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 more A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read... CVE-2021-26356 7.4 HighMay 9, 2023
• amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 more Insufficient bounds checking in ASP may allow an attacker to issue a system call from a... CVE-2021-26354 5.5 MediumMay 9, 2023
• amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 more Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper... CVE-2023-20558 8.8 HighMarch 23, 2023
• amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 more Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to... CVE-2023-20559 8.8 HighMarch 23, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors +174 more +176 more When SMT is enabled, certain AMD processors may speculatively execute instructions using a target... CVE-2022-27672 Fix available 4.7 MediumFebruary 14, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 more Failure to validate the communication buffer and communication service in the BIOS may allow an... CVE-2021-26316 7.8 HighJanuary 10, 2023
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 more IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets... CVE-2022-23824 Fix available 5.5 MediumNovember 9, 2022
• amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 more Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds... CVE-2021-26392 7.8 HighNovember 9, 2022
• amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +106 more +108 more Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged... CVE-2020-12930 7.8 HighNovember 9, 2022
• amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +103 more +105 more Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged... CVE-2020-12931 7.8 HighNovember 9, 2022
• amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 more Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU... CVE-2021-46778 5.6 MediumAugust 9, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 more Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type... CVE-2022-23825 Fix available 6.5 MediumJuly 12, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more AMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to... CVE-2022-29900 Public exploitFix available 6.5 MediumJuly 12, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 more A potential vulnerability in some AMD processors using frequency scaling may allow an... CVE-2022-23823 6.5 MediumJune 15, 2022
• amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 more A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system... CVE-2021-26386 7.8 HighMay 12, 2022
• amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +73 more +75 more Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify... CVE-2021-26317 7.8 HighMay 12, 2022
• amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 more Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges... CVE-2021-26368 4.4 MediumMay 12, 2022
• amd athlon™ series, ryzen 3 3100 firmware, ryzen 3 3300g firmware +48 more +50 more Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct... CVE-2021-26351 5.5 MediumMay 12, 2022
• amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +62 more +64 more An attacker, who gained elevated privileges via some other vulnerability, may be able to read... CVE-2021-26366 7.1 HighMay 12, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +106 more +108 more Improper validation of the BIOS directory may allow for searches to read beyond the directory... CVE-2021-26388 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 more Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling... CVE-2021-26376 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 more Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage... CVE-2021-26373 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 more Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid... CVE-2021-26378 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 more Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in... CVE-2021-26375 5.5 MediumMay 11, 2022
• amd athlon™ series, epyc 72f3 firmware, epyc 7313 firmware +84 more +86 more A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged... CVE-2021-26339 5.5 MediumMay 11, 2022
• amd athlon™ series, ryzen 3 5300g firmware, ryzen 3 5300ge firmware +29 more +31 more Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in... CVE-2021-26352 5.5 MediumMay 10, 2022
• amd athlon 300u firmware, athlon™ series, ryzen 3 3200u firmware +36 more +38 more A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory... CVE-2021-26390 6.2 MediumMay 10, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially... CVE-2021-26341 6.5 MediumMarch 11, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. CVE-2021-26401 Fix available 5.6 MediumMarch 11, 2022
• amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 more Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read... CVE-2021-26337 5.5 MediumNovember 16, 2021
• amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +94 more +96 more Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses... CVE-2021-26336 5.5 MediumNovember 16, 2021