Amd Ryzen™ 2000 Series Desktop Processors “Raven Ridge” AM4 vulnerabilities
11 vulnerabilities
Known vulnerabilities in Amd Ryzen™ 2000 Series Desktop Processors “Raven Ridge” AM4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26406amd1st gen amd epyc™ processors+52
EPSS score0.42%
Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.CVE-2021-26354amd2nd gen amd epyc™ processors+169EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-26371amd1st gen amd epyc™ processors+140EPSS score0.19%
A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.CVE-2021-26365amdamd_3015ce_firmware+63EPSS score0.57%
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.CVE-2021-46754amdamd ryzen™ embedded r1000+68EPSS score0.56%
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.CVE-2021-46759amdathlon_gold_3150g_firmware+64EPSS score0.28%
Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reveal the contents of the
ASP (AMD Secure Processor) bootloader accessible memory to a serial port,
resulting in a potential loss of integrity.CVE-2021-46756amd1st gen amd epyc™ processors+80EPSS score0.65%
Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.CVE-2021-46753amdathlon_gold_3150g_firmware+75EPSS score0.56%
Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite
data structures leading to a potential loss of confidentiality and integrity.CVE-2021-46794amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69EPSS score0.62%
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.CVE-2021-46792amdathlon_gold_3150g_firmware+62EPSS score0.40%
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.CVE-2021-46773amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+74EPSS score0.77%
Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.