CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale 微码提取工具 MC Extractor 新闻订阅 MC Extractor 讨论主题 Intel, AMD, VIA & Freescale CPU 微码仓库 A. 关于 MC Extractor MC Extractor 是一款解析 Intel、AMD、VIA 和 Freescale 处理器微码二进制文件的工具。终端用户可使用它获取所有相关微码信息，如 CPUID、平台、版本、日期、发布、大小、校验和等。它能够将 Intel 微码容器（dat、inc、h、txt）转换为 BIOS...

EUVD-2026-93987

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

CVE-2026-43598

A vulnerability exists in the AMD ROCm Communication Collectives Library (RCCL) due to improper input validation . This flaw could allow a compromised peer rank or a network-adjacent attacker to dereference an attacker-controlled pointer, potentially leading to remote code execution (RCE) on Inst...

CVE-2023-20564

CVE-2023-20564 - PoC de Acceso a Memoria Física del Driver AMD Ryzen Master Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra la vulnerabilidad CVE-2023-20564 en el Driver AMD Ryzen Master. La vulnerabilidad permite a usuarios no privilegiados leer y escribir memoria físi...

SHA256-CDP

SHA256-CDP：循环数字和投影（Cyclic Digit-sum Projection） 基于CDP结构分析框架的SHA-256 GPU加速彩虹表实现。 基于CDP论文（DOI：10.5281/zenodo.20627240）的研究成果，本仓库提供了CDP彩虹链表的完整、可工作实现，包含OpenCL构建内核和针对AMD RDNA4硬件的Vulkan计算查询/验证管线。 什么是CDP？ CDP（循环数字和投影）是SHA-256的一种结构分析框架，揭示了哈希函数输出分布中先前未记录过的数学性质。 核心发现：任何SHA-256输出的十六进制数字和 WH，当通过 fw =...

CVE-2026-90136

A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...

CVE-2026-92493

A flaw was found in the Linux kernel's amd-pstate-ut driver. A local user can trigger a kernel NULL pointer dereference by loading the amdpstateut module on a non-AMD platform, such as an Intel system. This can lead to a system crash, resulting in a Denial of Service DoS...

USN-8889-1: Linux kernel (OEM) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8888-1 linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8888-1: Linux kernel (Azure) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

x86-JTAG-Information

Información sobre JTAG x86 Resumen Hardware de depuración Intel Applied Microsystems CodeTAP ASSET InterTech American Arium ECM-6 ECM-S2 ECM-20 TRC-20 ECM-50 ECM-700 revA5 ECM-XDP ECM-XDP3 revB2 ECM-XDP3e ECM-CCC ASSET InterTech International Test Technologies µMaster MicroMaster ASSET InterTech...

igvm

igvm 本项目是独立客户虚拟机（Independent Guest Virtual Machine，IGVM）文件格式的所在地。格式规范见 igvmdefs crate，二进制格式的 Rust 实现则在 igvm crate 中。 IGVM 文件格式旨在封装启动虚拟机所需的所有信息，适用于任何虚拟化栈，并支持诸如 AMD SEV-SNP 和 Intel TDX 等不同隔离技术。 在概念层面上，该文件格式是由生成文件的工具创建的一组命令，加载器使用这些命令来构建初始的客户状态。文件格式还包含测量信息，底层平台将使用这些信息确认文件已正确加载并由相应权威机构签名。 参与贡献...

AmdRyzenMasterCheat

ECPRO-LAN 反作弊系统: FACEIT, ESEA 含自定义版本 2019年初至2020年末。R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ 要求: Windows 10 企业版 1607 LTSB 并安装所有更新 AMD Ryzen 处理器 主板 B350-B450（B550 客户端有 bug） 已安装 Logitech GHUB（用于鼠标输入） 旧代 Ryzen 处理器可能使用不同版本的 AmdRyzenMaster 驱动 1.3.0.0 你随后需要替换...

amd_eop_poc

amdeoppoc CVE-2020-8950 来自 Radeon 软件的 AMD 用户体验计划启动器权限提升（文件写入 EOP） 请阅读 note.txt https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html @404death...

Hypervisor-101-in-Rust

Hypervisor 101 in Rust Los materiales de la clase "Hypervisor 101 in Rust" impartida en Global Cybersecurity Camp 2023 Singapore. Este repositorio contiene un hipervisor de fuzzing para UEFI en procesadores Intel/AMD, materiales de la conferencia y ejercicios prácticos, y un corpus de muestra y...

EUVD-2026-92813

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

EUVD-2026-92811

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...