A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by...
5.5CVSS
5.9AI Score
0.0004EPSS
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of...
6.2CVSS
6.9AI Score
0.001EPSS
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of...
5.5CVSS
6.3AI Score
0.0004EPSS
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of...
7.1CVSS
7.3AI Score
0.0004EPSS
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code...
7.8CVSS
8AI Score
0.0004EPSS
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further...
5.5CVSS
6.2AI Score
0.0004EPSS
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode)...
7CVSS
7.3AI Score
0.0004EPSS
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of...
5.5CVSS
5.8AI Score
0.0004EPSS
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other...
5.5CVSS
6.3AI Score
0.0004EPSS
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code...
7.8CVSS
8AI Score
0.0004EPSS
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD...
5.6CVSS
6.5AI Score
0.975EPSS
Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data...
6.5CVSS
7.2AI Score
0.0004EPSS
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data...
7.5CVSS
7.6AI Score
0.002EPSS
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space...
4.7CVSS
4.6AI Score
0.0004EPSS