Vendor

AMD

493 known vulnerabilities.

Products

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54 AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 53 AMD Ryzen™ 7000 Series Desktop Processors 51 AMD Ryzen™ 5000 Series Desktop Processors 49 AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49 AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 47 AMD EPYC™ 9005 Series Processors 46 AMD Ryzen™ 3000 Series Desktop Processors 45 AMD EPYC™ 9004 Series Processors 44 AMD EPYC™ Embedded 9005 Series Processors 43 AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 42 AMD EPYC™ Embedded 7003 Series Processors 42 AMD EPYC™ 7003 Series Processors 41 AMD Ryzen™ Embedded V2000 Series Processors 39 AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 39 AMD Ryzen™ 8000 Series Desktop Processors 37 AMD EPYC™ 8004 Series Processors 35 AMD Ryzen™ Embedded R2000 Series Processors 34 AMD EPYC™ Embedded 8004 Series Processors 34 AMD Ryzen™ Embedded 8000 Series Processors 34 AMD Ryzen™ 4000 Series Desktop Processors 34 AMD Ryzen™ Embedded R1000 Series Processors 33 AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32 AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 32 AMD Ryzen™ Embedded 7000 Series Processors 31 AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 31 AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 30 AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 30 AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30 AMD Ryzen™ Embedded V3000 Series Processors 29 3rd Gen AMD EPYC™ 28 AMD Radeon™ PRO W6000 Series Graphics Products 28 AMD Radeon™ RX 6000 Series Graphics Products 28 Ryzen™ Series 27 Athlon™ Series 27 3rd Gen AMD EPYC™ Processors 27 AMD Ryzen™ 9000 Series Desktop Processors 27 AMD Radeon™ RX 7000 Series Graphics Products 27 AMD Radeon Software 26 AMD Radeon™ PRO W7000 Series Graphics Products 26

All Critical High Medium Low Exploited only Public exploit

493 results · Feed

Unscored —

CVE-2021-26317

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a…

AMD Athlon™ Series Ryzen™ Series

May 12, 2022
Unscored —

CVE-2021-26368

Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser pri…

AMD Ryzen™ Series Athlon™ Series

May 12, 2022
Unscored —

CVE-2021-26361

A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrat…

AMD Athlon™ Series Ryzen™ Series

May 12, 2022
Unscored —

CVE-2021-26362

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in map…

AMD Ryzen™ Series Athlon™ Series

May 12, 2022
Unscored —

CVE-2021-26351

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/wr…

AMD Athlon™ Series Ryzen™ Series

May 12, 2022
Unscored —

CVE-2021-26366

An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM result…

AMD Ryzen™ Series Athlon™ Series

May 12, 2022
Unscored —

CVE-2021-26369

A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, re…

AMD Athlon™ Series Ryzen™ Series

May 12, 2022
Unscored —

CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by m…

AMD AMD Processors

May 11, 2022
Unscored —

CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple…

AMD AMD Processors

May 11, 2022
Unscored —

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposi…

AMD Ryzen™ Series Athlon™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26376

Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulti…

AMD Athlon™ Series Ryzen™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26373

Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could res…

AMD Athlon™ Series Ryzen™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26348

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device…

AMD EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM…

AMD EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26349

Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into…

AMD EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26378

Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that cou…

AMD Ryzen™ Series Athlon™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26347

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an …

AMD Ryzen 5000 Series

May 11, 2022
Unscored —

CVE-2021-26342

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of o…

AMD EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26375

Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/t…

AMD Athlon™ Series Ryzen™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26372

Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid addres…

AMD Ryzen™ Series Athlon™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26339

A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU …

AMD Ryzen™ Series Athlon™ Series EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26350

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register…

AMD EPYC™ Processors

May 11, 2022
Unscored —

CVE-2021-26353

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partial…

AMD 3rd Gen EPYC

May 10, 2022
Unscored —

CVE-2021-46771

Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitra…

AMD 3rd Gen AMD EPYC™

May 10, 2022
Unscored —

CVE-2021-26324

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.

AMD 3rd Gen AMD EPYC™

May 10, 2022
Unscored —

CVE-2021-26332

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availabil…

AMD 3rd Gen AMD EPYC™

May 10, 2022
Unscored —

CVE-2021-26352

Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to inva…

AMD Athlon™ Series Ryzen™ Series

May 10, 2022
Unscored —

CVE-2021-26370

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a maliciou…

AMD 3rd Gen AMD EPYC™ 2nd Gen AMD EPYC™

May 10, 2022
Unscored —

CVE-2021-26390

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading t…

AMD Athlon™ Series Ryzen™ Series

May 10, 2022
Unscored —

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration poten…

AMD 2nd Gen AMD EPYC™ 1st Gen AMD EPYC™

May 10, 2022
Unscored —

CVE-2021-26341

Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakag…

AMD AMD Processors

Mar 11, 2022
Unscored —

CVE-2021-26401

LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.

AMD AMD Processors linux-raspi2 linux-hwe Debian Ubuntu Alpine

Mar 11, 2022
Medium 6.5

CVE-2021-39298

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…

AMD 3rd Gen EPYC 2nd Gen EPYC Ryzen 5000 Series

Feb 16, 2022
Unscored —

CVE-2020-12965

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using on…

AMD All supported processors

Feb 4, 2022
Unscored —

CVE-2020-12891

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop …

AMD Radeon Software Radeon Pro Software for Enterprise

Feb 4, 2022
Unscored —

CVE-2020-12966

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encryp…

AMD 1st/2nd/3rd Gen AMD EPYC™ Processors

Feb 4, 2022
Unscored —

CVE-2020-12890

Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker wit…

AMD AMD Processors

Dec 10, 2021
Unscored —

CVE-2021-26340

A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to f…

AMD AMD EPYC™

Dec 10, 2021
Unscored —

CVE-2021-26334

AMD Chipset Driver Information Disclosure Vulnerability

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.

AMD μProf Tool

Dec 1, 2021
Unscored —

CVE-2021-26337

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address…

AMD Ryzen™ Series Athlon™ Series

Nov 16, 2021