15 results · Clear filters · Feed
-
Medium 6.9
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access …
-
Medium 4.6
Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disa…
-
Medium 5.6
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…
-
Medium 6.9
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with lo…
-
Medium 6.9
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer ov…
-
Medium 6.3
Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the e…
-
Medium 6.0
Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sen…
-
Medium 6.0
Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with acce…
-
Medium 4.8
Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could a…
-
Medium 4.4
Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt…
-
Medium 4.1
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious user…
-
Medium 6.4
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator pr…
-
Medium 5.7
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory…
-
Medium 5.7
Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitra…
-
Medium 5.2
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged…