3rd Gen AMD EPYC™ at a glance
- Last 12 months
- 0
- Critical · all time
- 2
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
28 results · Feed
-
Critical 9.8
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-…
-
High 7.5
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out…
-
High 7.5
Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest…
-
Medium 6.8
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, p…
-
High 8.8
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA co…
-
High 7.5
Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the A…
-
Low 3.9
Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of int…
-
High 7.5
Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shar…
-
High 7.1
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory loca…
-
Critical 9.8
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, pote…
-
Unscored —
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitra…
-
Unscored —
A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.
-
Unscored —
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availabil…
-
Unscored —
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a maliciou…
-
Unscored —
Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of…
-
Unscored —
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.
-
Unscored —
Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.
-
Unscored —
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.
-
Unscored —
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privil…
-
Unscored —
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW…
-
Unscored —
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allo…
-
Unscored —
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox en…
-
Unscored —
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of …
-
Unscored —
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a loca…
-
Unscored —
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
-
Unscored —
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result…
-
Unscored —
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tabl…
-
Unscored —
Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.