Amd Athlon™ Series vulnerabilities, page 2

27 vulnerabilities

Known vulnerabilities in Amd Athlon™ Series, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2021-26372amdathlon™ series+46
EPSS score
0.22%
Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
7.1CVE-2021-26362amdathlon_3050ge_firmware+37
EPSS score
0.22%
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.
5.5CVE-2021-26361amdathlon_3050ge_firmware+37
EPSS score
0.24%
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
4.4CVE-2021-26382amdathlon™ series+36
EPSS score
0.19%
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
7CVE-2020-12951amdathlon™ series+59
EPSS score
0.22%
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
7.8CVE-2020-12944amdathlon™ series+58
EPSS score
0.35%
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
7.1CVE-2020-12946amdathlon™ series+45
EPSS score
0.22%
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.