Skip to contentAmd vulnerabilities
Products
Show 140 moreShow less
Newest
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +62 more +64 moreImproper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an...CVE-2021-467596.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...CVE-2021-467569.1 Critical
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 3100 firmware +29 more +31 moreFailure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor)...CVE-2021-467557.5 High
- amd ryzen™ embedded r1000, ryzen™ embedded r2000, ryzen™ embedded v1000 +66 more +68 moreInsufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker...CVE-2021-467549.1 Critical
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +73 more +75 moreFailure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers...CVE-2021-467539.1 Critical
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in...CVE-2021-467497.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 moreInsufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD...CVE-2021-264067.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 3015ce firmware, 3015e firmware, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +61 more +63 moreCertain size values in firmware binary headers
could trigger out of bounds reads during signature...CVE-2021-263658.2 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read...CVE-2021-263567.4 High
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreAn attacker with a compromised ASP could
possibly send malformed commands to an ASP on another...CVE-2023-205247.5 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 moreImproper access control settings in ASP
Bootloader may allow an attacker to corrupt the return...CVE-2023-205209.8 Critical
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient input validation on the model
specific register: VM_HSAVE_PA may potentially lead to...CVE-2022-238187.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper input validation in ABL may enable an
attacker with physical access, to perform...CVE-2021-467756.8 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to...CVE-2021-467698.8 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory...CVE-2021-467647.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient input validation in the SMU may
enable a privileged attacker to write beyond the...CVE-2021-467637.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc™ embedded 7002 +49 more +51 moreInsufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially...CVE-2021-467623.9 Low
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient address validation, may allow an
attacker with a compromised ABL and UApp to corrupt...CVE-2021-263977.1 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU...CVE-2021-263799.8 Critical
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper...CVE-2023-205588.8 High
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to...CVE-2023-205598.8 High
- amd ryzen™ master, ryzen master +1 moreFailure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker...CVE-2022-276777.8 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors +174 more +176 moreWhen SMT is enabled, certain AMD processors may speculatively execute instructions using a target...CVE-2022-27672Fix available4.7 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient input validation in the SMU may allow an attacker to improperly lock resources,...CVE-2023-205325.3 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address...CVE-2023-205317.5 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory...CVE-2023-205307.5 High
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bound checks in the SMU may allow an attacker to update the from/to address space to...CVE-2023-205297.5 High
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory...CVE-2023-205282.4 Low
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreImproper syscall input validation in the ASP Bootloader may allow a privileged attacker to read...CVE-2023-205276.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to...CVE-2023-205256.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreTOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially...CVE-2023-205235.7 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially...CVE-2023-205227.5 High
- amd 3rd gen epyc, milanpi-sp3 firmware +1 moreFailure to validate addresses provided by software to BIOS commands may result in a potential...CVE-2022-238145.3 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi-sp3 firmware +1 more +3 moreThe software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting...CVE-2022-238135.3 Medium
- amd 3rd gen epyc, milanpi firmware +1 moreInsufficient input validation during parsing of the System Management Mode (SMM) binary may allow...CVE-2021-467915.5 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +3 more +5 moreInsufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application...CVE-2021-467797.1 High
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds...CVE-2021-467685.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, milanpi firmware +1 more +3 moreInsufficient input validation in the ASP may allow an attacker with physical access, unauthorized...CVE-2021-467676.1 Medium
- amd 3rd gen epyc, milanpi firmware +1 moreInsufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP)...CVE-2021-264097.8 High
- amd 2nd gen epyc, romepi firmware +1 moreA randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key...CVE-2021-264075.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 7313 firmware +21 more +23 moreImproper input validation and bounds checking in SEV firmware may leak scratch buffer bytes...CVE-2021-264045.5 Medium
- amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 moreInsufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret...CVE-2021-264036.5 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreInsufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox...CVE-2021-264027.1 High
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 moreInsufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or...CVE-2021-263987.8 High
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a...CVE-2021-263964.4 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient fencing and checks in System Management Unit (SMU) may result in access to invalid...CVE-2021-263555.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software...CVE-2021-263435.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreFailure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss...CVE-2021-263284.4 Medium
- Show moreLoading…