CVE-2023-20510

An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service...

CVE-2023-20509

An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity...

CVE-2021-46746

CVE-2021-46746 : The AMD ASP/TEE stack protection gap allows a privileged attacker with access to AMD signing keys to corrupt the return address via a stack-based buffer overrun, potentially causing a denial of service. This aligns with AMD’s CVE entry (base score 5.2, local access, high attack c...

CVE-2021-26387

CVE-2021-26387 describes insufficient access controls in the AMD ASP kernel that could allow a privileged attacker with access to AMD signing keys and BIOS/UEFI shell to map DRAM regions into protected areas, risking platform integrity. Public documents indicate this CVE is tracked within AMD sec...

CVE-2021-26387

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity...

AMD Zynq UltraScale+ 安全漏洞

AMD Zynq UltraScale+ is a multiprocessor system-on-chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Zynq UltraScale+ that stems from incorrect input validation in the trusted firmware, which allows a privileged attacker to perform an out-of-bind read, resulting in a dat...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that stems from improper validation of the array index, allowing a privileged attacker to cause an out-of-bounds memory read in PMFW, which could result in a...

PT-2024-12280 · Amd +8 · Sev Firmware +8

Name of the Vulnerable Software and Affected Versions: SEV firmware affected versions not specified Description: The issue is related to incomplete system memory cleanup in SEV firmware, which could allow a privileged attacker to corrupt guest private memory. This potentially results in a loss of...

PT-2024-11949 · Pmfw · Pmfw

Name of the Vulnerable Software and Affected Versions: PMFW affected versions not specified Description: A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage. Recommendations: At the moment, there is...

PT-2024-12269 · Unknown · Power Management Firmware

Name of the Vulnerable Software and Affected Versions: Power Management Firmware affected versions not specified Description: The generation of weak and predictable Initialization Vector IV in Power Management Firmware may allow an attacker with privileges to reuse IV values to reverse-engineer...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver, which stems from a hard-coded AES key that could cause a privileged attacker to gain access to the key, leading to the disclosure of internal debugging...

PT-2024-10904 · Amd · Asp Kernel

Name of the Vulnerable Software and Affected Versions: ASP kernel affected versions not specified Description: Insufficient access controls in the ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas,...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that originates from incorrect input validation, which allows an attacker with privileges to send incorrectly formatted input, resulting in a loss of integri...

PT-2024-12268 · Smu · Smu

Name of the Vulnerable Software and Affected Versions: SMU affected versions not specified Description: The issue is related to improper input validation in SMU, which may allow an attacker with privileges and a compromised physical function PF to modify the PCIe lane count and speed. This could...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Graphics Driver that stems from insufficient DRAM address validation, which could allow a privileged attacker to read from an invalid DRAM address into SRAM, resulting i...

kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned

A flaw was found in the Linux kernel's block subsystem, where a NULL pointer dereference occurs if partitions are created or resized with a size that is not a multiple of the logical block size. This flaw allows a privileged attacker to cause a denial of service...

Privilege Escalation

langflow is vulnerable to Privilege Escalation. The vulnerability is due to improper validation in the '/api/v1/users' endpoint, allowing a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request...

kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned

A flaw was found in the Linux kernel's block subsystem, where a NULL pointer dereference occurs if partitions are created or resized with a size that is not a multiple of the logical block size. This flaw allows a privileged attacker to cause a denial of service...

PT-2024-5580 · Dell · Idrac Service Module

Name of the Vulnerable Software and Affected Versions: Dell iDRAC Service Module versions 5.3.0.0 and prior Description: The issue is related to an out of bounds write operation in the memory, which could allow an attacker to execute arbitrary code or cause a denial of service. A privileged local...

VulnCheck KEV: CVE-2023-21932

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications component: OXI. The supported version that is affected is 5.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...