374 matches found
CVE-2021-26410
Improper syscall input validation in ASP AMD Secure Processor may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure...
CVE-2021-26410
Improper syscall input validation in ASP AMD Secure Processor may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure...
CVE-2021-26410
Improper syscall input validation in ASP AMD Secure Processor may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure...
CVE-2021-26410
The CVE-2021-26410 entry concerns an improper syscall input validation in the AMD Secure Processor (ASP) that may force the kernel to read syscall parameter values from its own memory space, enabling an attacker to infer contents of kernel memory and potentially disclose information. Connected so...
CVE-2025-29949
Insufficient input parameter sanitization in AMD Secure Processor ASP Boot Loader legacy recovery mode only could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service...
CVE-2025-29949
CVE-2025-29949 is an AMD ASP Boot Loader issue limited to legacy recovery mode. The connected documents confirm insufficient input parameter sanitization in the ASP Boot Loader, which could allow an out-of-bounds write that corrupts Secure DRAM and may cause a denial of service. Affected software...
CVE-2025-29949
Insufficient input parameter sanitization in AMD Secure Processor ASP Boot Loader legacy recovery mode only could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service...
CVE-2025-29949
Insufficient input parameter sanitization in AMD Secure Processor ASP Boot Loader legacy recovery mode only could allow an attacker to write out-of-bounds to corrupt Secure DRAM potentially resulting in denial of service...
PT-2026-7462
Name of the Vulnerable Software and Affected Versions AMD Secure Processor ASP Boot Loader affected versions not specified Description A flaw exists in the AMD Secure Processor ASP Boot Loader, specifically within its legacy recovery mode. This issue involves inadequate sanitization of input...
AMD Athlon™ and AMD Ryzen™ Processor Vulnerabilities – February 2026
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score| CVSS Attack Vector ---|---|---|--- CVE-2025-52533| Improper access control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data...
PT-2026-7463
Name of the Vulnerable Software and Affected Versions AMD Secure Processor ASP affected versions not specified Description A buffer overflow exists in the AMD Secure Processor ASP bootloader. This flaw could allow an attacker to overwrite memory. Successful exploitation may lead to privilege...
AMD Graphics Driver Vulnerabilities – February 2026
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description | CVSS Score ---|---|--- CVE-2024-36324| Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.| 8.8 High...
PT-2026-7459
Name of the Vulnerable Software and Affected Versions AMD Secure Processor affected versions not specified Description A flaw exists in the syscall input validation within the AMD Secure Processor ASP. This issue could allow an attacker to force the kernel to read syscall parameter values from it...
PT-2026-7464
Name of the Vulnerable Software and Affected Versions AMD Secure Processor ASP Boot Loader affected versions not specified Description A flaw exists in the AMD Secure Processor ASP Boot Loader where insufficient parameter sanitization could allow an attacker with access to SPIROM upgrade to...
CVE-2025-47359
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2025-47359 Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API...
CVE-2025-47359 Use After Free in Secure Processor
Memory Corruption when multiple threads simultaneously access a memory free API...
CVE-2025-47358 Use After Free in Secure Processor
Memory Corruption when user space address is modified and passed to memfree API, causing kernel memory to be freed inadvertently...
CVE-2025-47358
CVE-2025-47358 describes a memory corruption/use-after-free scenario where a modified user-space address passed to mem_free leads to inadvertent kernel memory being freed. Multiple sources identify the issue in the Secure Processor family, with the underlying cause being improper handling of user...