Amd Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” vulnerabilities
5 vulnerabilities
Known vulnerabilities in Amd Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-26406amd · 1st gen amd epyc™ processors +52 moreamd 1st gen amd epyc™ processorsInsufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.EPSS0.42%MediumCVE-2021-26354amd · 2nd gen amd epyc™ processors +169 moreamd 2nd gen amd epyc™ processorsInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.EPSS0.18%CriticalCVE-2021-46756amd · 1st gen amd epyc™ processors +80 moreamd 1st gen amd epyc™ processorsInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.EPSS0.65%HighCVE-2021-46749amd · 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +69 moreamd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedtInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.EPSS0.62%HighCVE-2021-46773amd · 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +74 moreamd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedtInsufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.EPSS0.77%