Vendor
AMD
493 known vulnerabilities.
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 53
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 5000 Series Desktop Processors 49
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 47
AMD EPYC™ 9005 Series Processors 46
AMD Ryzen™ 3000 Series Desktop Processors 45
AMD EPYC™ 9004 Series Processors 44
AMD EPYC™ Embedded 9005 Series Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 42
AMD EPYC™ Embedded 7003 Series Processors 42
AMD EPYC™ 7003 Series Processors 41
AMD Ryzen™ Embedded V2000 Series Processors 39
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 39
AMD Ryzen™ 8000 Series Desktop Processors 37
AMD EPYC™ 8004 Series Processors 35
AMD Ryzen™ Embedded R2000 Series Processors 34
AMD EPYC™ Embedded 8004 Series Processors 34
AMD Ryzen™ Embedded 8000 Series Processors 34
AMD Ryzen™ 4000 Series Desktop Processors 34
AMD Ryzen™ Embedded R1000 Series Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded 7000 Series Processors 31
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 31
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 30
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
Ryzen™ Series 27
Athlon™ Series 27
3rd Gen AMD EPYC™ Processors 27
AMD Ryzen™ 9000 Series Desktop Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
158 results · Clear filters · Feed
-
Medium 5.2
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid D…
-
Medium 5.2
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged…
-
Medium 5.7
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an …
-
Medium 6.0CVE-2024-21978 Public exploit
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially l…
-
Medium 6.0CVE-2023-31355 Public exploit
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC …
-
Medium 5.3
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with a…
-
Medium 5.3
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with a…
-
Medium 5.7CVE-2024-2193 Public exploit
Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.
A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the …
-
Medium 4.9
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an…
-
Medium 6.0CVE-2023-31346 Public exploit
Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.
-
Medium 5.3
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integr…
-
Medium 6.1
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inv…
-
Medium 6.7
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inv…
-
Medium 6.5
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the powe…
-
Medium 5.9
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race…
-
Medium 6.1
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access…
-
Medium 5.5
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure …
-
Medium 5.5
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause…
-
Medium 6.8
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, p…
-
Medium 5.3
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a…
-
Medium 6.5
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, p…
-
Medium 6.5
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the …
-
Medium 5.7
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of int…
-
Medium 5.3
Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of gues…
-
Medium 5.3
The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of …
-
Medium 5.5
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted…
-
Medium 5.5
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the AS…
-
Medium 6.1
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memor…
-
Medium 5.5
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting …
-
Medium 5.5
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential inform…
-
Medium 6.5
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in com…
-
Medium 4.4
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity…
-
Medium 5.5
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers …
-
Medium 5.5
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conte…
-
Medium 4.4
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity fo…
-
Medium 4.7
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the …
-
Medium 5.5
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an …
-
Medium 6.5
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…