amd Vulnerability Advisory Catalog

Total 274 security vulnerabilities recorded for amd software and firmware.

← Back to All Vendors
Component: epyc_7003_firmware

AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code...

๐Ÿ“… 2021-11-16
CVSS 7.8 Dossier →
Component: epyc_7003_firmware

AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources....

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7003_firmware

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality....

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7232p_firmware

Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service....

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7232p_firmware

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity....

๐Ÿ“… 2021-11-16
CVSS 7.8 Dossier →
Component: epyc_7601_firmware

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP....

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7601_firmware

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to per...

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7003_firmware

When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verificat...

๐Ÿ“… 2021-11-16
CVSS 7.8 Dossier →
Component: epyc_7003_firmware

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Man...

๐Ÿ“… 2021-11-16
CVSS 7.8 Dossier →
Component: epyc_7003_firmware

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modif...

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7003_firmware

Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations....

๐Ÿ“… 2021-11-16
CVSS 7.0 Dossier →
Component: epyc_7f72_firmware

Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service....

๐Ÿ“… 2021-11-16
CVSS 7.1 Dossier →
Component: epyc_7601_firmware

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution....

๐Ÿ“… 2021-11-16
CVSS 7.8 Dossier →
Component: epyc_7f72_firmware

Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in...

๐Ÿ“… 2021-11-16
CVSS 7.5 Dossier →
Component: epyc_7601_firmware

AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resourc...

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: epyc_7232p_firmware

Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity....

๐Ÿ“… 2021-11-16
CVSS 7.8 Dossier →
Component: epyc_7601_firmware

Persistent platform private key may not be protected with a random IV leading to a potential โ€œtwo time pad attackโ€....

๐Ÿ“… 2021-11-16
CVSS 7.5 Dossier →
Component: epyc_7601_firmware

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should n...

๐Ÿ“… 2021-11-16
CVSS 5.5 Dossier →
Component: radeon_software

Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation....

๐Ÿ“… 2021-11-15
CVSS 7.8 Dossier →
Component: radeon_software

AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of service (DoS)....

๐Ÿ“… 2021-11-15
CVSS 5.5 Dossier →
Component: radeon_software

Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure....

๐Ÿ“… 2021-11-15
CVSS 5.5 Dossier →
Component: radeon_software

Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of service....

๐Ÿ“… 2021-11-15
CVSS 7.8 Dossier →
Component: radeon_software

Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure....

๐Ÿ“… 2021-11-15
CVSS 5.5 Dossier →
Component: radeon_software

Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service....

๐Ÿ“… 2021-11-15
CVSS 7.1 Dossier →
Page 9 of 12 (274 Total Records)