AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-46754Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce th
- CVE-2021-46753Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uap
- CVE-2021-46749Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox
- CVE-2021-26406Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES
- CVE-2021-26371A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to user
- CVE-2021-26365Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service o
- CVE-2021-26356A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data c
- CVE-2021-26354Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory val
- CVE-2023-20524An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, pot
- CVE-2023-20520Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun
- CVE-2022-23818Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity.
- CVE-2021-46775Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to
- CVE-2021-46769Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead
- CVE-2021-46764Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially result
- CVE-2021-46763Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer pote
- CVE-2021-46762Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of s
- CVE-2021-26397Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially res
- CVE-2021-26379Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a
- CVE-2023-20558 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to
- CVE-2023-20559 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially lead
- CVE-2022-27677 Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potential
- CVE-2022-27672When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode
- CVE-2023-20532Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.
- CVE-2023-20531Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resultin
- CVE-2023-20530Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of
- CVE-2023-20529Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in
- CVE-2023-20528Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leadin
- CVE-2023-20527Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to
- CVE-2023-20525Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped re
- CVE-2023-20523TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of s