Total 274 security vulnerabilities recorded for amd software and firmware.
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially lead...
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss...
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure...
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure. ...
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure. ...
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality. ...
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-con...
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure ...
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest. ...
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potentia...
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 dire...
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which m...
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests. ...
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potent...
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, ...
Insufficient validation in the IOCTL input/output buffer in AMD ฮผProf may allow an attacker to bypass bounds checks potentially leading to a Windows k...
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure....
Insufficient validation of the IOCTL input buffer in AMD ฮผProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel...
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges ...
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to...
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code ex...
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow p...
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading ...
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to ...