Amd vulnerabilities, page 2
320 vulnerabilities
Known vulnerabilities in Amd products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,346 products.
CVE-2021-26336amdathlon™ series+96
EPSS score0.22%
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components.CVE-2021-26331amd1st gen amd epyc™+60EPSS score0.29%
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.CVE-2021-26315amd3rd gen amd epyc™+20EPSS score0.17%
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.CVE-2021-26367amdathlon_gold_3150c_firmware+35EPSS score0.16%
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.CVE-2021-26406amd1st gen amd epyc™ processors+52EPSS score0.42%
Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.CVE-2021-26398amd1st gen epyc+66EPSS score0.21%
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.CVE-2021-26392amdamd_3015ce_firmware+110EPSS score0.28%
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.CVE-2021-26339amdathlon™ series+85EPSS score0.28%
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.CVE-2021-26342amdepyc_7001_firmware+38EPSS score0.22%
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.CVE-2021-26317amdathlon_3050ge_firmware+75EPSS score0.29%
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.CVE-2021-26384amdathlon_gold_3150u_firmware+53EPSS score0.20%
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.CVE-2021-26354amd2nd gen amd epyc™ processors+169EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-26334amdamd_uprof+1EPSS score1.21%
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.CVE-2021-26324amd3rd gen amd epyc™+23EPSS score0.27%
A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.CVE-2021-26400amdamd processors+1EPSS score0.24%
AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage.CVE-2021-26386amdathlon™ series+71EPSS score0.28%
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.CVE-2021-26409amd3rd gen epyc+1EPSS score0.19%
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.CVE-2021-26369amdathlon_3050ge_firmware+51EPSS score0.24%
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.CVE-2021-26326amd3rd gen amd epyc™+20EPSS score0.26%
Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.CVE-2021-26364amdepyc_7232p_firmware+44EPSS score0.22%
Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.