Skip to content
OpenAdvisories
Medium · 5.7 CVE-2024-21981 EUVD-2024-19587GHSA-8x5q-gq29-2h75

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pr…

Published Aug 13, 2024 · Updated Aug 15, 2024 · Assigned by AMD

Description

Improper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentially resulting in loss of
confidentiality and integrity.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 7001 Series Processors various —
AMD AMD EPYC™ 7002 Series Processors various —
AMD AMD EPYC™ 7003 Series Processors various —
AMD AMD Ryzen™ 3000 Series Desktop Processors various —
AMD AMD Ryzen™ 5000 Series Desktop Processors various —
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics various —
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics various —
AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics various —
AMD AMD Ryzen™ Threadripper™ 3000 Series Processors various —
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors various —
AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors various —
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics various —
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics various —
AMD AMD EPYC™ Embedded 3000 Series Processors various —
AMD AMD EPYC™ Embedded 7002 Series Processors various —
AMD AMD EPYC™ Embedded 7003 Series Processors various —
AMD AMD Ryzen™ Embedded R1000 Series Processors various —
AMD AMD Ryzen™ Embedded R2000 Series Processors various —
AMD AMD Ryzen™ Embedded 5000 Series Processors various —
AMD AMD Ryzen™ Embedded V1000 Series Processors various —

Advisories 1

References