AMD vulnerabilities
491 CVEs and advisories name AMD as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-26320Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attac
- CVE-2021-26336Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and sub
- CVE-2020-12946Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.
- CVE-2021-26322Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
- CVE-2021-26329AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss
- CVE-2021-26312Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory i
- CVE-2021-26338Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM re
- CVE-2021-26326Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.
- CVE-2020-12894Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service.
- CVE-2020-12960AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of serv
- CVE-2020-12893Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalation of privilege or denial of service.
- CVE-2020-12903Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of serv
- CVE-2020-12962Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation.
- CVE-2020-12905Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure.
- CVE-2020-12901Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure.
- CVE-2020-12898Stack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
- CVE-2020-12892An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution.
- CVE-2020-12963An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the syste
- CVE-2020-12895Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or d
- CVE-2020-12929Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to by
- CVE-2020-12920A potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler.
- CVE-2020-12902Arbitrary Decrement Privilege Escalation in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
- CVE-2020-12897Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass.
- CVE-2020-12899Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service.
- CVE-2020-12900An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation o
- CVE-2020-12904Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure.
- CVE-2020-12964A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler.
- CVE-2021-26318Side-channels Related to the x86 PREFETCH Instruction
- CVE-2021-26333AMD Chipset Driver Information Disclosure Vulnerability
- CVE-2020-12988A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system wh