Heap overflow

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

Input validation

Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

Design/Logic Flaw

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

Design/Logic Flaw

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

Input validation

Improper input and range checking in the AMD Secure Processor ASP boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26330

CVE-2021-26330 describes a heap-based overflow in the AMD System Management Unit (SMU) that may result in resource loss. Connected sources confirm affected hardware as AMD EPYC generations (1st/2nd/3rd Gen) and associate the issue with SMU/ASP components. The AMD Bulletin AMD-SB-1021 provides mit...

CVE-2021-26329

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

Integer overflow

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2020-12961

CVE-2020-12961 affects AMD Platform Security Processor (PSP). The issue could allow an attacker to zero a privileged register on the System Management Network, potentially bypassing SPI ROM protections. Documented impact is high (CVSSv3.1: 7.8 Local, High impact) with local access and no user int...

CVE-2021-26315

CVE-2021-26315: The AMD Platform Security Processor (PSP) boot ROM decrypts encrypted firmware but does not adequately verify the integrity of the decrypted image, potentially allowing arbitrary code execution in the PSP when using encrypted firmware. The issue is described across multiple source...

CVE-2021-26315

When the AMD Platform Security Processor PSP boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used...

CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-26331

CVE-2021-26331 affects the AMD System Management Unit (SMU). The vulnerability description indicates a malicious user could manipulate mailbox entries to achieve arbitrary code execution. Impact and exploit details are not provided beyond this, but the AMD-SB-1021 bulletin notes mitigations via O...

CVE-2021-26335

Improper input and range checking in the AMD Secure Processor ASP boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution...

CVE-2021-26335

CVE-2021-26335 concerns the AMD Secure Processor (ASP) boot loader image header. The issue is improper input and range checking, enabling attacker-controlled values before signature validation and potentially allowing arbitrary code execution. In NVD/AMD documentation, the vulnerability is listed...

CVE-2021-26320

Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

CVE-2021-26320

Technical details about CVE-2021-26320 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-26329

CVE-2021-26329 affects the AMD System Management Unit (SMU). The available documents confirm an integer overflow when an invalid length is provided, potentially causing resource loss. The issue is listed for multiple AMD EPYC generations (1st/2nd/3rd Gen) in AMD’s SB-1021 bulletin. Mitigations in...