Known vulnerabilities in AMD Ryzen™ Threadripper™ PRO Processors “Chagall” WS

Is your version affected?

CVE	Summary	Score	Published
CVE-2021-46794	Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…	7.5 High	May 9, 2023
CVE-2021-46773	Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…	8.8 High	May 9, 2023
CVE-2021-46755	Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an…	7.5 High	May 9, 2023
CVE-2021-46749	Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…	7.5 High	May 9, 2023
CVE-2021-26371	A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure…	5.5 Medium	May 9, 2023
CVE-2021-26356	A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially…	7.4 High	May 9, 2023
CVE-2021-26354	Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may…	5.5 Medium	May 9, 2023