Skip to content
OpenAdvisories

Product · AMD

3rd Gen EPYC

26 known vulnerabilities.

15 results · Clear filters · Feed

  • Medium 5.3

    Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a…

  • Medium 6.5

    Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, p…

  • Medium 6.5

    Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the …

  • Medium 5.7

    TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of int…

  • Medium 5.3

    Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of gues…

  • Medium 5.3

    The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of …

  • Medium 5.5

    Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted…

  • Medium 5.5

    Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the AS…

  • Medium 6.1

    Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memor…

  • Medium 5.5

    Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential inform…

  • Medium 4.4

    Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity…

  • Medium 5.5

    Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers …

  • Medium 5.5

    Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conte…

  • Medium 4.4

    Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity fo…

  • Medium 6.5

    A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…