10872 matches found
CVE-2023-31307
Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...
CVE-2023-31307
Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...
CVE-2023-20518
Incomplete cleanup in the ASP may expose the Master Encryption Key MEK to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality...
DEBIAN-CVE-2023-20584
IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
CVE-2023-20510
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service...
CVE-2023-20509
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity...
CVE-2023-20512
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage...
CVE-2021-26387
Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity...
UBUNTU-CVE-2023-20584
IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
CVE-2023-31339
CVE-2023-31339 concerns improper input validation in ARM Trusted Firmware used in AMD Zynq UltraScale+ MPSoC/RFSoC. The vulnerability could allow a privileged attacker to perform out-of-bounds reads, potentially causing data leakage and denial of service. Affected component is the ARM Trusted Fir...
CVE-2023-31356
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity...
CVE-2023-31356
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity...
CVE-2023-31356
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity...
CVE-2023-31307
CVE-2023-31307 involves improper validation of an array index in Power Management Firmware (PMFW), allowing a local, privileged attacker to trigger an out-of-bounds memory read and potentially cause a denial of service. The issue is documented across multiple sources, referencing PMFW as the vuln...
CVE-2023-31307
Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...
CVE-2023-20518
Incomplete cleanup in the ASP may expose the Master Encryption Key MEK to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality...
CVE-2023-20518
CVE-2023-20518 describes an incomplete cleanup in the AMD Secure Processor (ASP) that could expose the Master Encryption Key (MEK) to a privileged attacker with BIOS/UEFI access, leading to potential confidentiality loss. The vulnerability spans ASP, SEV, and SEV-SNP related firmware; exploitatio...
CVE-2023-20512
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage...
CVE-2023-20512
CVE-2023-20512 describes a hardcoded AES key in PMFW that could allow a privileged attacker to access the key and potentially leak internal debug information. Multiple connected sources corroborate PMFW as the affected component and the root cause as a hardcoded key, leading to unauthorized acces...