Skip to contentAmd vulnerabilities
Products
Show 140 moreShow less
Newest
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +5 more +7 moreImproper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI...CVE-2023-205877.1 High
- amd ryzen™ embedded 5000, ryzen™ embedded v2000, ryzen embedded 5600e firmware +9 more +11 moreInsufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA...CVE-2021-467577.8 High
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreDue to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...CVE-2023-313474.9 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreFailure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data...CVE-2023-31346Public exploitFix available6.0 Medium
- amd alveo u200 firmware, alveo u250 firmware, alveo u280 firmware +50 more +52 moreInsufficient verification of data authenticity in
the configuration state machine may allow a...CVE-2023-205703.3 Low
- amd athlon 3000g firmware, instinct mi100 firmware, instinct mi210 firmware +129 more +131 moreGPU kernel implementations susceptible to memory leakCVE-2023-4969Fix available6.5 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 moreDebug Exception Delivery in Secure Nested PagingCVE-2023-20573Public exploit3.2 Low
- amd ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7035 series processors with radeon™ graphics “rembrandt-r”, ryzen 3 5125c firmware +68 more +70 moreImproper input validation in the SMM Supervisor may allow an attacker with a compromised SMI...CVE-2023-205969.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreA race condition in System Management Mode (SMM) code may allow an attacker using a compromised...CVE-2023-205718.1 High
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...CVE-2023-205657.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +92 more +94 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...CVE-2023-205637.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...CVE-2022-238219.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +67 more +69 moreInsufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may...CVE-2021-467586.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...CVE-2023-20592Fix available6.5 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 moreImproper address validation in ASP with SNP enabled may potentially allow an attacker to...CVE-2023-205665.3 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, genoapi firmware +1 more +3 moreA Use-After-Free vulnerability in the management of an SNP guest context page may allow a...CVE-2023-205193.3 Low
- amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 moreSMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential...CVE-2022-238301.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 moreFailure to validate the value in APCB may allow a privileged attacker to tamper with the APCB...CVE-2021-263451.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 moreFailure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM...CVE-2022-238207.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium
- amd 4th gen amd epyc™ processors, epyc™ embedded 9003, epyc 9124 firmware +28 more +30 moreImproper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged...CVE-2021-467662.5 Low
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +6 more +8 moreImproper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to...CVE-2023-31320Public exploit7.5 High
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +7 more +9 moreImproper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an...CVE-2023-205686.7 Medium
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +7 more +9 moreImproper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an...CVE-2023-205676.7 Medium
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +7 more +9 moreInsufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access...CVE-2021-467485.5 Medium
- amd radeon rx 5300 xt, radeon software, radeon™ pro w5000 series graphics cards +13 more +15 moreAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated...CVE-2023-20598Public exploit7.8 High
- amd ryzen 5 7600x, ryzen 7 4800u, apple m1 mac mini +14 more +16 morePVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software...CVE-2023-442165.3 Medium
- amd epyc™ embedded 7003, ryzen™ embedded 5000, ryzen™ embedded v2000 +112 more +114 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205975.5 Medium
- amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205944.4 Medium
- amd ryzen™ master, ryzen master, ryzen master monitoring sdk +2 moreInsufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™...CVE-2023-205604.4 Medium
- amd ryzen, ryzen™ master, ryzen master +1 more +3 moreInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™...CVE-2023-20564Public exploit6.7 Medium
- amd μprof, uprof +1 moreInsufficient validation of the IOCTL (Input Output Control) input buffer in AMD ?Prof may...CVE-2023-205615.5 Medium
- amd μprof, uprof +1 moreInsufficient validation of the IOCTL (Input Output Control) input buffer in AMD ?Prof may...CVE-2023-205565.5 Medium
- amd uprof, uprof tool, μprof +2 moreInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may...CVE-2023-20562Public exploit7.8 High
- amd athlon 3000g, athlon 3015ce firmware, athlon 3015e firmware +136 more +138 moreInsufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory...CVE-2023-205557.8 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon gold pro 3150g firmware +49 more +51 moreSpeculative LeaksCVE-2023-20588Fix availableEPSS 11.2%5.5 Medium
- amd radeon™ software crimson relive edition, radeon software +1 moreRadeon™ Software Crimson ReLive EditionCVE-2023-205869.8 Critical
- ryzen™ pro 5000 series desktop processors, amd 4700s firmware, athlon gold 3150c firmware +142 more +144 morefTPM Voltage Fault InjectionCVE-2023-205896.8 Medium
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- amd processors, * +1 moreSoftware based Power Side Channel on AMD CPUsCVE-2023-205834.7 Medium
- debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 moreModerate: linux-firmware security updateCVE-2023-20593Public exploitFix available5.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +89 more +91 moreA potential power side-channel vulnerability in some AMD processors may allow an authenticated...CVE-2023-205756.5 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in...CVE-2021-467947.5 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious...CVE-2021-467925.9 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 1200 \(af\) firmware +72 more +74 moreInsufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory,...CVE-2021-467738.8 High
- amd ryzen 3100 firmware, ryzen 3300x firmware, ryzen 3500 firmware +46 more +48 moreInsufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out...CVE-2021-467657.5 High
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen 3945wx firmware, ryzen 3955wx firmware +6 more +8 moreA malicious or compromised UApp or ABL can send
a malformed system call to the bootloader, which...CVE-2021-467609.8 Critical
- Show moreLoading…