289 matches found
AMD Athlon input validation vulnerability
AMD Athlon is a family of microprocessors from UltraMicroelectronics AMD. An input validation error vulnerability exists in AMD Athlon™ Processors, Ryzen™ Processors, and Threadripper™ Processors, which stems from a failure to validate that communication buffers and communication services in the...
Null pointer dereference
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.00...
IBPB and Return Stack Buffer Interactions
Bulletin ID: AMD-SB-1040 Potential Impact: Information Disclosure Severity: Medium Summary AMD is aware of a potential vulnerability affecting AMD CPUs where the OS relies on IBPB to flush the return address predictor. This may allow for CVE-2017-5715 previously known as Spectre Variant 2 attacks...
PT-2022-7168 · Amd · Amd Ryzen
Name of the Vulnerable Software and Affected Versions: AMD Ryzen affected versions not specified Description: The issue is related to insufficient input validation in the System Management Mode SMM Supervisor firmware of AMD Ryzen processors. This could allow a remote attacker to elevate privileg...
AMD Ryzen security vulnerabilities
AMD Ryzen is a central processing unit CPU from the American company AMD. AMD Ryzen has a security vulnerability. Attackers have exploited the vulnerability to disclose sensitive information...
Multiple AMD processor security vulnerabilities
AMD Processors is a processor from the American company AMD. A security vulnerability exists in AMD CPU Branch. The following products and versions are affected: AMD Athlon™ X4 processor,AMD Ryzen™ Threadripper™ PRO processor,2nd Gen AMD Ryzen™ Threadripper™ processors,3rd Gen AMD Ryzen™...
AMD Ryzen buffer error vulnerability
AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A buffer error vulnerability exists in the AMD Ryzen family of processors that originates from a boundary error in the system management interface and can be exploited by a local user to perform DoS attacks. The...
AMD Ryzen security feature vulnerabilities
AMD Ryzen is a central processing unit CPU from AMD in the United States. A security signature issue vulnerability exists in the AMD Ryzen family of processors, which stems from a lack of validation of the signing key when processing ACP firmware images, and can be exploited by a local privileged...
Vulnerability fixed in AMD processors
AMD has fixed a vulnerability with reference CVE-2021-26401 for the Ryzen and Athlon processors. This vulnerability has the same cause as the vulnerability known as Spectre, with attribute CVE-2017-5717. This vulnerability allows a malicious party to obtain sensitive data from the memory of a loc...
LFENCE/JMP Mitigation Update for CVE-2017-5715
Bulletin ID: AMD-SB-1036 Potential Impact: Loss of Confidentiality Severity: Medium Summary AMD is providing an update for one recommended mitigation for CVE-2017-5715 previously known as Spectre Variant 2. The speculative execution window of AMD LFENCE/JMP mitigation MITIGATION V2-2 may be large...
AMD CPUs May Transiently Execute Beyond Unconditional Direct Branch
Bulletin ID: AMD-SB-1026 Potential Impact: Data leakage Severity: Medium Summary AMD is providing an update for one recommended mitigation, mitigation G-5, in the “Software Techniques for Managing Speculation on AMD processors” white paper. Mitigation G-5 helps address potential vulnerabilities...
Mageia: Security Advisory (MGASA-2019-0217)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: This Power System update is being released to address CVE-2018-8931
Summary POWER8/POWER9: In response to a security bypass vulnerability, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-8931. Vulnerability Details CVEID: CVE-2018-8931 DESCRIPTION: The AMD Ryzen, Ryzen Pro, and Ryzen Mobil...
AMD Chipset Driver Information Disclosure Vulnerability
Bulletin ID: AMD-SB-1009 Potential Impact: Information Disclosure Severity: Medium Summary Low privileged malicious users may be able to access and leak data through the AMD Chipset Driver. CVE Details CVE-2021-26333 Insufficient access controls in the AMD Link Android app may potentially result ...
Surface expands its Secured-core portfolio with the new Surface Laptop 4 powered by AMD Ryzen™ Mobile Processors
As operating systems are becoming more secure and resistant to compromise, advanced vectors like firmware, kernel and hardware direct memory access DMA have emerged as new favored targets for threat actors. Recent trends indicate a substantial growth in the number of hardware and firmware exploit...
Surface expands its Secured-core portfolio with the new Surface Laptop 4 powered by AMD Ryzen™ Mobile Processors
As operating systems are becoming more secure and resistant to compromise, advanced vectors like firmware, kernel and hardware direct memory access DMA have emerged as new favored targets for threat actors. Recent trends indicate a substantial growth in the number of hardware and firmware exploit...
HPSBHF03707 rev. 1 - AMD® Ryzen Master™ Driver October 2020 Security Update
Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Ryzen Master™ Driver which might allow escalation of privileges. For detaile...
CVE-2020-12928
A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system...
