Skip to contentAmd vulnerabilities
Products
Show 140 moreShow less
Newest
- amd cezannepi-fp6 firmware, comboam4v2 pi firmware, renoirpi-fp6 firmware +2 more +4 moreA TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a...CVE-2021-467954.7 Medium
- amd ryzen 5000 series, ryzen 3 3100 firmware, ryzen 3 3200g firmware +102 more +104 moreFailure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an...CVE-2021-263465.5 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 moreFailure to validate the communication buffer and communication service in the BIOS may allow an...CVE-2021-263167.8 High
- amd genoa firmware, hygon 1 firmware, hygon 2 firmware +36 more +38 moreIncorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM...CVE-2022-292778.8 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- amd link android, link +1 moreInsufficient access controls in the AMD Link Android app may potentially result in information...CVE-2022-276737.5 High
- amd μprof, uprof +1 moreInsufficient validation of the IOCTL input buffer in AMD ?Prof may allow an attacker to send an...CVE-2022-238317.5 High
- amd μprof, uprof +1 moreInsufficient validation in the IOCTL input/output buffer in AMD ?Prof may allow an attacker to...CVE-2022-276747.5 High
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 moreInsufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds...CVE-2021-263927.8 High
- amd radeon rx 6000 series & pro w6000 series, enterprise driver, radeon pro software +1 more +3 moreAn attacker with local access to the system can make unauthorized modifications of the security...CVE-2021-263607.8 High
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded r1000 +70 more +72 moreInsufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE)...CVE-2021-263935.5 Medium
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, enterprise driver +25 more +27 moreInsufficient verification of multiple header signatures while loading a Trusted Application (TA)...CVE-2021-263917.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +106 more +108 moreImproper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged...CVE-2020-129307.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +103 more +105 moreImproper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged...CVE-2020-129317.8 High
- amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 moreExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU...CVE-2021-467785.6 Medium
- amd athlon gold 3150u firmware, athlon silver 3050u firmware, athlon™ series +51 more +53 moreA malformed SMI (System Management Interface) command may allow an attacker to establish a...CVE-2021-263847.8 High
- amd athlon™ series, ryzen 3 3200u firmware, ryzen 3 3250u firmware +34 more +36 moreAn attacker with root account privileges can load any legitimately signed firmware image into the...CVE-2021-263824.4 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 moreA potential vulnerability in some AMD processors using frequency scaling may allow an...CVE-2022-238236.5 Medium
- amd athlon™ series, radeon software, ryzen 3 3100 firmware +33 more +35 moreA malicious or compromised UApp or ABL could potentially change the value that the ASP uses for...CVE-2021-263634.4 Medium
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreA malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system...CVE-2021-263867.8 High
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +73 more +75 moreFailure to verify the protocol in SMM may allow an attacker to control the protocol and modify...CVE-2021-263177.8 High
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreInsufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges...CVE-2021-263684.4 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +35 more +37 moreA malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an...CVE-2021-263615.5 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +35 more +37 moreA malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system...CVE-2021-263627.1 High
- amd athlon™ series, ryzen 3 3100 firmware, ryzen 3 3300g firmware +48 more +50 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct...CVE-2021-263515.5 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +62 more +64 moreAn attacker, who gained elevated privileges via some other vulnerability, may be able to read...CVE-2021-263667.1 High
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +49 more +51 moreA malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call...CVE-2021-263697.8 High
- amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 moreAn attacker with access to a malicious hypervisor may be able to infer data values used in a SEV...CVE-2021-467446.5 Medium
- amd processors, cpu +1 moreAMD processors may speculatively re-order load instructions which can result in stale data being...CVE-2021-264004.0 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +106 more +108 moreImproper validation of the BIOS directory may allow for searches to read beyond the directory...CVE-2021-263885.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling...CVE-2021-263765.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 moreInsufficient bound checks in the System Management Unit (SMU) may result in a system voltage...CVE-2021-263735.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU)...CVE-2021-263485.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreInsufficient bounds checking in an SMU mailbox register could allow an attacker to potentially...CVE-2021-263645.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest...CVE-2021-263495.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient bound checks in the System Management Unit (SMU) may result in access to an invalid...CVE-2021-263785.5 Medium
- amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 moreTOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a...CVE-2021-263474.7 Medium
- amd epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware +36 more +38 moreIn SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a...CVE-2021-263423.3 Low
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in...CVE-2021-263755.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +44 more +46 moreInsufficient bound checks related to PCIE in the System Management Unit (SMU) may result in...CVE-2021-263725.5 Medium
- amd athlon™ series, epyc 72f3 firmware, epyc 7313 firmware +84 more +86 moreA bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged...CVE-2021-263395.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreA TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...CVE-2021-263504.7 Medium
- amd 3rd gen epyc, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreDue to a mishandled error, it is possible to leave the DRTM UApp in a partially initialized state...CVE-2021-263537.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may...CVE-2021-467717.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreA bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.CVE-2021-263247.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreFailure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of...CVE-2021-263327.1 High
- amd athlon™ series, ryzen 3 5300g firmware, ryzen 3 5300ge firmware +29 more +31 moreInsufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in...CVE-2021-263525.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +48 more +50 moreImproper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and...CVE-2021-263707.1 High
- Show moreLoading…