Amd vulnerabilities, page 5
320 vulnerabilities
Known vulnerabilities in Amd products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,346 products.
CVE-2021-26351amdathlon™ series+50
EPSS score0.21%
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.CVE-2021-26393amdamd_3015ce_firmware+72EPSS score0.27%
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.CVE-2021-26404amd3rd gen epyc+23EPSS score0.18%
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.CVE-2021-26372amdathlon™ series+46EPSS score0.22%
Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.CVE-2021-26362amdathlon_3050ge_firmware+37EPSS score0.22%
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.CVE-2021-26361amdathlon_3050ge_firmware+37EPSS score0.24%
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.CVE-2021-26355amd3rd gen epyc+24EPSS score0.17%
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service.CVE-2021-26391amdamd radeon rx 5000 series & pro w5000 series+27EPSS score0.18%
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.CVE-2021-26402amd2nd gen epyc+51EPSS score0.18%
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.CVE-2021-26329amd1st gen amd epyc™+59EPSS score0.22%
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.CVE-2021-26382amdathlon™ series+36EPSS score0.19%
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.CVE-2021-26365amdamd_3015ce_firmware+63EPSS score0.57%
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.CVE-2021-39298amd2nd gen epyc+191EPSS score0.37%
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.CVE-2021-46758amdamd ryzen™ 5000 series processors with radeon™ graphics “barcelo”+69EPSS score0.33%
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.CVE-2021-46791amd3rd gen epyc+1EPSS score0.18%
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.CVE-2021-46795amdcezannepi-fp6_firmware+4EPSS score0.14%
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.CVE-2021-46754amdamd ryzen™ embedded r1000+68EPSS score0.56%
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.CVE-2021-46759amdathlon_gold_3150g_firmware+64EPSS score0.28%
Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reveal the contents of the
ASP (AMD Secure Processor) bootloader accessible memory to a serial port,
resulting in a potential loss of integrity.CVE-2021-46744amdamd processors+99EPSS score0.33%
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.CVE-2021-46772amdamd athlon™ 3000 series desktop processors with radeon™ graphics+13EPSS score0.18%
Insufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS menu or UEFI shell to tamper with the
structure headers in SPI ROM causing an out of bounds memory read and write,
potentially resulting in memory corruption or denial of service.