SUSE CVE-2018-8930

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3...

SUSE CVE-2018-8931

The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1...

SUSE CVE-2018-8932

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...

SUSE CVE-2018-8935

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW...

SUSE CVE-2018-8936

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...

SUSE CVE-2018-8934

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW...

CVE-2022-27677

Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentially leading to privilege escalation and code execution by the lower privileged user...

CVE-2022-27677

CVE-2022-27677 concerns AMD Ryzen Master and the Ryzen Master Monitoring SDK. The issue is described as insufficient privilege validation during the installation of Ryzen Master, which may allow a low-privilege attacker to modify files and potentially achieve privilege escalation and code executi...

CVE-2022-27677

Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentially leading to privilege escalation and code execution by the lower privileged user...

PT-2023-1797 · Amd · Amd Ryzen Master

Name of the Vulnerable Software and Affected Versions: AMD Ryzen Master affected versions not specified Description: The issue is related to insufficient access control in the AMD Ryzen Master utility, which could allow an attacker to escalate privileges. The problem arises from the failure to...

AMD Ryzen™ Master Security Bulletin

Bulletin ID: AMD-SB-1052 Potential Impact: Privilege Escalation Severity: High Summary AMD Ryzen™ Master is a software tool that gives users advanced, real-time control of system performance. AMD Ryzen™ Master allows the user to control various clock and voltage settings in real time. CVE Details...

AMD Athlon 输入验证错误漏洞

AMD Athlon is a family of microprocessors from UltraMicroelectronics AMD. An input validation error vulnerability exists in AMD Athlon™ Processors, Ryzen™ Processors, and Threadripper™ Processors, which stems from a failure to validate that communication buffers and communication services in the...

Null pointer dereference

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.00...

IBPB and Return Stack Buffer Interactions

Bulletin ID: AMD-SB-1040 Potential Impact: Information Disclosure Severity: Medium Summary AMD is aware of a potential vulnerability affecting AMD CPUs where the OS relies on IBPB to flush the return address predictor. This may allow for CVE-2017-5715 previously known as Spectre Variant 2 attacks...

PT-2022-7168 · Amd · Amd Ryzen

Name of the Vulnerable Software and Affected Versions: AMD Ryzen affected versions not specified Description: The issue is related to insufficient input validation in the System Management Mode SMM Supervisor firmware of AMD Ryzen processors. This could allow a remote attacker to elevate privileg...

AMD Ryzen 安全漏洞

AMD Ryzen is a central processing unit CPU from the American company AMD. AMD Ryzen has a security vulnerability. Attackers have exploited the vulnerability to disclose sensitive information...

多款AMD处理器安全漏洞

AMD Processors is a processor from the American company AMD. A security vulnerability exists in AMD CPU Branch. The following products and versions are affected: AMD Athlon™ X4 processor,AMD Ryzen™ Threadripper™ PRO processor,2nd Gen AMD Ryzen™ Threadripper™ processors,3rd Gen AMD Ryzen™...

AMD Ryzen 安全特征问题漏洞

AMD Ryzen is a central processing unit CPU from AMD in the United States. A security signature issue vulnerability exists in the AMD Ryzen family of processors, which stems from a lack of validation of the signing key when processing ACP firmware images, and can be exploited by a local privileged...

AMD Ryzen 缓冲区错误漏洞

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A buffer error vulnerability exists in the AMD Ryzen family of processors that originates from a boundary error in the system management interface and can be exploited by a local user to perform DoS attacks. The...

Vulnerability fixed in AMD processors

AMD has fixed a vulnerability with reference CVE-2021-26401 for the Ryzen and Athlon processors. This vulnerability has the same cause as the vulnerability known as Spectre, with attribute CVE-2017-5717. This vulnerability allows a malicious party to obtain sensitive data from the memory of a loc...