AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-20522Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.
- CVE-2022-23814Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confide
- CVE-2022-23813The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest me
- CVE-2021-46791Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binar
- CVE-2021-46779Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP
- CVE-2021-46768Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potent
- CVE-2021-46767Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading
- CVE-2021-26409Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of S
- CVE-2021-26407A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclo
- CVE-2021-26404Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.
- CVE-2021-26403Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confide
- CVE-2021-26402Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write par
- CVE-2021-26398Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (A
- CVE-2021-26396Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
- CVE-2021-26355Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in
- CVE-2021-26343Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memo
- CVE-2021-26328Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.
- CVE-2021-46795A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory
- CVE-2021-26346Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in t
- CVE-2021-26316Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting
- CVE-2022-23824IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure
- CVE-2022-27673Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.
- CVE-2022-23831Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Wind
- CVE-2022-27674Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a
- CVE-2021-26392Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with pri
- CVE-2021-26360An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers.
- CVE-2020-12930Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially l
- CVE-2021-26393Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with p
- CVE-2021-26391Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to ga
- CVE-2020-12931Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentiall