Aller au contenu

Vulnérabilités de AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-20572 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… 5.6 Moyenne 26 juin 2026
CVE-2023-20540 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… 1.8 Faible 26 juin 2026
CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 Élevée 1 juin 2026
CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… 6.9 Moyenne 15 mai 2026
CVE-2021-26380 A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside… 1.8 Faible 15 mai 2026
CVE-2024-21962 Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location… 8.6 Élevée 15 mai 2026
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 Élevée 15 mai 2026
CVE-2025-62619 Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the… 6.3 Moyenne 14 mai 2026
CVE-2025-62625 Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… 6.0 Moyenne 14 mai 2026
CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 Élevée 16 avr. 2026
CVE-2023-31364 Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… 8.3 Élevée 26 févr. 2026
CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… 8.7 Élevée 12 févr. 2026
CVE-2021-26381 Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping… 7.1 Élevée 10 févr. 2026
CVE-2025-29949 Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could… 4.8 Moyenne 10 févr. 2026
CVE-2024-36355 Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify… 7.0 Élevée 10 févr. 2026
CVE-2025-29950 Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory… 7.1 Élevée 10 févr. 2026
CVE-2024-36354 Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access,… 7.5 Élevée 6 sept. 2025
CVE-2024-21970 Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to… 4.4 Moyenne 6 sept. 2025
CVE-2024-21947 Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary… 7.5 Élevée 6 sept. 2025
CVE-2023-31330 An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to… 2.5 Faible 6 sept. 2025
CVE-2021-26377 Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious… 4.1 Moyenne 6 sept. 2025
CVE-2024-21977 Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the… 3.2 Faible 5 sept. 2025
CVE-2022-23817 Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious… 7.3 Élevée 13 août 2024

Autres produits AMD