Known vulnerabilities in AMD 3rd Gen EPYC
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-20532 | Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in… | 5.3 Medium | Jan 10, 2023 |
| CVE-2023-20531 | Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid… | 7.5 High | Jan 10, 2023 |
| CVE-2023-20530 | Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially… | 7.5 High | Jan 10, 2023 |
| CVE-2023-20529 | Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value… | 7.5 High | Jan 10, 2023 |
| CVE-2023-20528 | Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C… | 2.4 Low | Jan 10, 2023 |
| CVE-2023-20527 | Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds,… | 6.5 Medium | Jan 10, 2023 |
| CVE-2023-20525 | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the… | 6.5 Medium | Jan 10, 2023 |
| CVE-2023-20523 | TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of… | 5.7 Medium | Jan 10, 2023 |
| CVE-2023-20522 | Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of… | 7.5 High | Jan 10, 2023 |
| CVE-2022-23814 | Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest… | 5.3 Medium | Jan 10, 2023 |
| CVE-2022-23813 | The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of… | 5.3 Medium | Jan 10, 2023 |
| CVE-2021-46791 | Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-46779 | Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an… | 7.1 High | Jan 10, 2023 |
| CVE-2021-46768 | Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-46767 | Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory… | 6.1 Medium | Jan 10, 2023 |
| CVE-2021-26409 | Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially… | 7.8 High | Jan 10, 2023 |
| CVE-2021-26404 | Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-26402 | Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an… | 7.1 High | Jan 10, 2023 |
| CVE-2021-26398 | Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an… | 7.8 High | Jan 10, 2023 |
| CVE-2021-26396 | Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory… | 4.4 Medium | Jan 10, 2023 |
| CVE-2021-26355 | Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-26343 | Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-26328 | Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for… | 4.4 Medium | Jan 10, 2023 |
| CVE-2021-26316 | Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper… | 7.8 High | Jan 10, 2023 |
| CVE-2021-26353 | Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a… | Not rated | May 10, 2022 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 33