Browse CVEs

MEDIUM 5.5 CVE-2020-12954 A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modi… Epyc 7003 Firmware No fix yet Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26320 Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to pe… Epyc 7601 Firmware Mitigation only Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26321 Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP. Epyc 7601 Firmware Mitigation only Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26325 Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service. Epyc 7232p Firmware Mitigation only Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26327 Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality. Epyc 7003 Firmware Mitigation only Fix from $1,6002021-11-16 HIGH 7.8 CVE-2021-26326 Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. Epyc 7232p Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.5 CVE-2021-26322 Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. Epyc 7601 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.5 CVE-2021-26338 Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting i… Epyc 7f72 Firmware Mitigation only Fix from $1,9502021-11-16 MEDIUM 5.5 CVE-2021-26312 Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should … Epyc 7601 Firmware Mitigation only Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26329 AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resour… Epyc 7601 Firmware Mitigation only Fix from $1,6002021-11-16 HIGH 7.5 CVE-2020-12988 A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is … Epyc 7001 Firmware No fix yet Fix from $1,9502021-06-11 HIGH 7.2 CVE-2020-12967 The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a ma… Epyc 7232p Mitigation only Fix from $1,9502021-05-13 HIGH 7.2 CVE-2021-26311 In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be u… Epyc 7232p Mitigation only Fix from $1,9502021-05-13 MEDIUM 6.4 CVE-2020-12926 The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in… Trusted Platform Modules Reference Mitigation only Fix from $1,6002020-11-12 MEDIUM 5.5 CVE-2020-12912 A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAP… Energy Driver For Linux Mitigation only Fix from $1,6002020-11-12 CRITICAL 9.9 CVE-2020-6100 An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cau… Radeon Directx 11 Driver Atidxx64.dll No fix yet Fix from $2,3002020-07-20 CRITICAL 9.9 CVE-2020-6101 An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An att… Radeon Directx 11 Driver Atidxx64.dll No fix yet Fix from $2,3002020-07-20 CRITICAL 9.9 CVE-2020-6102 An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An att… Radeon Directx 11 Driver Atidxx64.dll No fix yet Fix from $2,3002020-07-20 CRITICAL 9.9 CVE-2020-6103 An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An att… Radeon Directx 11 Driver Atidxx64.dll No fix yet Fix from $2,3002020-07-20 CRITICAL 9.8 CVE-2019-7247 An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not prope… Overdrive Mitigation only Fix from $2,3002020-05-18 MEDIUM 6.7 CVE-2019-7246 An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes … Atillk64 Mitigation only Fix from $1,6002020-05-18 HIGH 8.8 CVE-2020-12138 AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that ma… Atillk64 No fix yet Fix from $1,9502020-04-27 CRITICAL 9.0 CVE-2019-5183 An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A… Atidxx64 Mitigation only Fix from $2,3002020-01-25 HIGH 8.6 CVE-2019-5124 An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. A specially crafted pixel shader can ca… Atidxx64 Mitigation only Fix from $1,9502020-01-25 HIGH 8.6 CVE-2019-5146 An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. A specially crafted pixel shader can ca… Atidxx64 Mitigation only Fix from $1,9502020-01-25 HIGH 8.6 CVE-2019-5147 An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. A specially crafted pixel shader can cau… Atidxx64 Mitigation only Fix from $1,9502020-01-25 CRITICAL 10.0 CVE-2019-5049 An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted… Radeon Rx 550 Firmware Mitigation only Fix from $2,3002019-10-31 MEDIUM 5.5 CVE-2019-5478 A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields o… Zu11eg Firmware Mitigation only Fix from $1,6002019-09-03 CRITICAL 9.0 CVE-2018-8936 The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation. Ryzen Mobile Firmware No fix yet Fix from $2,3002018-03-22 CRITICAL 9.0 CVE-2018-8930 The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MA… Ryzen Mobile Firmware Mitigation only Fix from $2,3002018-03-22