Amd Ryzen™ Threadripper™ PRO Processors “Chagall” WS vulnerabilities

7 vulnerabilities

Known vulnerabilities in Amd Ryzen™ Threadripper™ PRO Processors “Chagall” WS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2021-26354amd2nd gen amd epyc™ processors+169
EPSS score
0.18%
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity.7.4CVE-2021-26356amd1st gen amd epyc™ processors+105
EPSS score
0.40%
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.5.5CVE-2021-26371amd1st gen amd epyc™ processors+140
EPSS score
0.19%
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.7.5CVE-2021-46749amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69
EPSS score
0.62%
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.7.5CVE-2021-46794amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69
EPSS score
0.62%
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.8.8CVE-2021-46773amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+74
EPSS score
0.77%
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.7.5CVE-2021-46755amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+31
EPSS score
0.62%
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service.