Vendor
AMD
493 known vulnerabilities.
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 53
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 5000 Series Desktop Processors 49
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 47
AMD EPYC™ 9005 Series Processors 46
AMD Ryzen™ 3000 Series Desktop Processors 45
AMD EPYC™ 9004 Series Processors 44
AMD EPYC™ Embedded 9005 Series Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 42
AMD EPYC™ Embedded 7003 Series Processors 42
AMD EPYC™ 7003 Series Processors 41
AMD Ryzen™ Embedded V2000 Series Processors 39
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 39
AMD Ryzen™ 8000 Series Desktop Processors 37
AMD EPYC™ 8004 Series Processors 35
AMD Ryzen™ Embedded R2000 Series Processors 34
AMD EPYC™ Embedded 8004 Series Processors 34
AMD Ryzen™ Embedded 8000 Series Processors 34
AMD Ryzen™ 4000 Series Desktop Processors 34
AMD Ryzen™ Embedded R1000 Series Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded 7000 Series Processors 31
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 31
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 30
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
Ryzen™ Series 27
Athlon™ Series 27
3rd Gen AMD EPYC™ Processors 27
AMD Ryzen™ 9000 Series Desktop Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
493 results · Feed
-
Medium 6.5
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the …
-
Medium 5.7
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of int…
-
High 7.5
Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of servi…
-
Medium 5.3
Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of gues…
-
Medium 5.3
The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of …
-
Medium 5.5
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted…
-
High 7.1
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an at…
-
Medium 5.5
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the AS…
-
Medium 6.1
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memor…
-
High 7.8
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially res…
-
Medium 5.5
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting …
-
Medium 5.5
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential inform…
-
Medium 6.5
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in com…
-
High 7.1
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an …
-
High 7.8
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attac…
-
Medium 4.4
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity…
-
Medium 5.5
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers …
-
Medium 5.5
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conte…
-
Medium 4.4
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity fo…
-
Medium 4.7
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the …
-
Medium 5.5
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an …
-
High 7.8
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with…
-
Unscored —
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential i…
-
High 7.5
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.
-
High 7.5
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leadin…
-
High 7.5
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks pot…
-
Unscored —
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing…
-
High 7.8
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SO…
-
Unscored —
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their pri…
-
Unscored —
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenti…
-
High 7.8
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker …
-
Unscored —
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their …
-
Unscored —
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codena…
-
Unscored —
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info d…
-
Unscored —
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (A…
-
Unscored —
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to i…
-
Unscored —CVE-2022-29900 Public exploit
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…
-
Unscored —
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute…
-
Unscored —
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to o…
-
Unscored —
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootl…