Skip to content

Vulnerabilities of AMD AMD Ryzen™ Embedded R1000 Series Processors

Is your version affected?

CVE Summary Score Published
CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High Jun 1, 2026
CVE-2022-23826 A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly… 1.8 Low May 15, 2026
CVE-2021-26380 A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside… 1.8 Low May 15, 2026
CVE-2025-0045 Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… 6.9 Medium May 15, 2026
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High May 15, 2026
CVE-2025-48521 Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a… 6.9 Medium May 15, 2026
CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High May 15, 2026
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High Apr 16, 2026
CVE-2023-31364 Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… 8.3 High Feb 26, 2026
CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… 8.7 High Feb 12, 2026
CVE-2024-36320 Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading… 7.0 High Feb 11, 2026
CVE-2025-29951 A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory,… 7.3 High Feb 10, 2026
CVE-2021-26410 Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter… 1.8 Low Feb 10, 2026
CVE-2021-26381 Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping… 7.1 High Feb 10, 2026
CVE-2025-29949 Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could… 4.8 Medium Feb 10, 2026
CVE-2024-36355 Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify… 7.0 High Feb 10, 2026
CVE-2024-21970 Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to… 4.4 Medium Sep 6, 2025
CVE-2024-21947 Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary… 7.5 High Sep 6, 2025
CVE-2021-46750 Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to… 3.0 Low Sep 6, 2025
CVE-2021-26377 Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious… 4.1 Medium Sep 6, 2025
CVE-2023-20599 Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto… 7.9 High Jun 10, 2025
CVE-2024-21981 Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained… 5.7 Medium Aug 13, 2024
CVE-2023-20518 Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the… 1.9 Low Aug 13, 2024
CVE-2022-23817 Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious… 7.3 High Aug 13, 2024
CVE-2021-46772 Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to… 3.9 Low Aug 13, 2024

Other AMD products