Browse CVEs

HIGH 7.8 CVE-2021-46771 Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a comprom… Epyc 7763 Firmware Mitigation only Fix from $1,9502022-05-10 HIGH 7.8 CVE-2021-26353 Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potential… Epyc 7763 Firmware Mitigation only Fix from $1,9502022-05-10 HIGH 7.1 CVE-2021-26332 Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability. Epyc 7763 Firmware Mitigation only Fix from $1,9502022-05-10 HIGH 7.1 CVE-2021-26370 Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an att… Epyc 7763 Firmware Mitigation only Fix from $1,9502022-05-10 HIGH 7.1 CVE-2021-26408 Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of gu… Epyc 7002 Firmware Mitigation only Fix from $1,9502022-05-10 MEDIUM 6.2 CVE-2021-26390 A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data. Ryzen 5 2600 Firmware No fix yet Fix from $1,6002022-05-10 MEDIUM 5.5 CVE-2021-26352 Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could r… Ryzen 5 2600 Firmware Mitigation only Fix from $1,6002022-05-10 HIGH 7.8 CVE-2021-26324 A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. Epyc 7763 Firmware Mitigation only Fix from $1,9502022-05-10 MEDIUM 5.6 CVE-2021-26401 LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. Athlon X4 940 Firmware Mitigation only Fix from $1,6002022-03-11 MEDIUM 6.5 CVE-2021-26341 Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. Athlon X4 940 Firmware Mitigation only Fix from $1,6002022-03-11 MEDIUM 6.8 CVE-2021-44850 On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM. Because the Zynq-7000's bo… Xilinx Z 7012s Firmware Mitigation only Fix from $1,6002022-02-10 HIGH 7.8 CVE-2020-12891 AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any … Radeon Pro Software 21.q2 / 21.4.1+ Fix from $1,9502022-02-04 HIGH 7.5 CVE-2020-12965 When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits p… Ryzen Pro 5650g Firmware Mitigation only Fix from $1,9502022-02-04 MEDIUM 5.5 CVE-2020-12966 AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure … Epyc 7763 Firmware Mitigation only Fix from $1,6002022-02-04 HIGH 8.4 CVE-2021-26340 A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside… Epyc 7001 Firmware Mitigation only Fix from $1,9502021-12-10 MEDIUM 6.7 CVE-2020-12890 Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative a… Amd Generic Encapsulated Software Architecture Mitigation only Fix from $1,6002021-12-10 CRITICAL 9.9 CVE-2021-26334 The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation an… Amd Uprof 3.4.494 / 3.4.502+ Fix from $2,3002021-12-01 HIGH 7.8 CVE-2021-26331 AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary cod… Epyc 7003 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.8 CVE-2021-26335 Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values … Epyc 7003 Firmware Mitigation only Fix from $1,9502021-11-16 MEDIUM 5.5 CVE-2021-26330 AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. Epyc 7003 Firmware Mitigation only Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26336 Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent f… Epyc 7003 Firmware Mitigation only Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26337 Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not … Epyc 7003 Firmware Mitigation only Fix from $1,6002021-11-16 HIGH 7.8 CVE-2020-12944 Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution. Epyc 7601 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.8 CVE-2020-12961 A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Ma… Epyc 7003 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.8 CVE-2021-26315 When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verifica… Epyc 7003 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.8 CVE-2021-26323 Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. Epyc 7232p Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.1 CVE-2020-12946 Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service. Epyc 7f72 Firmware Mitigation only Fix from $1,9502021-11-16 HIGH 7.0 CVE-2020-12951 Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. Epyc 7003 Firmware Mitigation only Fix from $1,9502021-11-16 MEDIUM 5.5 CVE-2020-12954 A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modi… Epyc 7003 Firmware No fix yet Fix from $1,6002021-11-16 MEDIUM 5.5 CVE-2021-26320 Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to pe… Epyc 7601 Firmware Mitigation only Fix from $1,6002021-11-16