Vendor
AMD
493 known vulnerabilities.
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 53
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 5000 Series Desktop Processors 49
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 47
AMD EPYC™ 9005 Series Processors 46
AMD Ryzen™ 3000 Series Desktop Processors 45
AMD EPYC™ 9004 Series Processors 44
AMD EPYC™ Embedded 9005 Series Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 42
AMD EPYC™ Embedded 7003 Series Processors 42
AMD EPYC™ 7003 Series Processors 41
AMD Ryzen™ Embedded V2000 Series Processors 39
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 39
AMD Ryzen™ 8000 Series Desktop Processors 37
AMD EPYC™ 8004 Series Processors 35
AMD Ryzen™ Embedded R2000 Series Processors 34
AMD EPYC™ Embedded 8004 Series Processors 34
AMD Ryzen™ Embedded 8000 Series Processors 34
AMD Ryzen™ 4000 Series Desktop Processors 34
AMD Ryzen™ Embedded R1000 Series Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded 7000 Series Processors 31
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 31
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 30
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
Ryzen™ Series 27
Athlon™ Series 27
3rd Gen AMD EPYC™ Processors 27
AMD Ryzen™ 9000 Series Desktop Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
493 results · Feed
-
Low 3.4
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access t…
-
High 7.1
Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leadi…
-
High 7.8
Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the …
-
Medium 4.9
Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an…
-
Medium 6.0CVE-2023-31346 Public exploit
Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.
-
Low 3.3
Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potenti…
-
Low 3.2CVE-2023-20573 Public exploit
Debug Exception Delivery in Secure Nested Paging
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
-
Unscored —
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 acce…
-
Unscored —
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage …
-
Unscored —
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of…
-
High 7.8
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of…
-
Unscored —
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading t…
-
Unscored —
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to re…
-
Unscored —
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervi…
-
Medium 5.3
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integr…
-
Unscored —
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masqu…
-
Low 1.9
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest…
-
Low 1.9
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-…
-
Medium 6.1
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inv…
-
Low 1.9
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the…
-
Low 3.3
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory con…
-
High 7.5
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to …
-
Medium 6.7
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inv…
-
Low 2.5
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP…
-
Unscored —CVE-2023-31320 Public exploit
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display pote…
-
Unscored —
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin priv…
-
Unscored —
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin priv…
-
Unscored —
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bound…
-
High 7.8CVE-2023-20598 Public exploit
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOC…
-
Unscored —
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via lo…
-
Unscored —
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via lo…
-
Unscored —
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may allow a privileged at…
-
Unscored —CVE-2023-20564 Public exploit
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged a…
-
Unscored —
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user t…
-
Unscored —
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user t…
-
Unscored —CVE-2023-20562 Public exploit
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user t…
-
Unscored —
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arb…
-
Unscored —CVE-2023-20588 EPSS 11%
Speculative Leaks
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
-
Unscored —
Radeon™ Software Crimson ReLive Edition
A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigations
-
Unscored —
fTPM Voltage Fault Injection
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.