CVE-2021-26346

Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service...

AMD Server Vulnerabilities - January 2023 - Lenovo Support US

No description provided...

PT-2023-1487 · Amd · Amd Bios

Name of the Vulnerable Software and Affected Versions: AMD BIOS software affected versions not specified Description: The issue is related to a failure in validating the communication buffer and service in the BIOS, which may allow an attacker to tamper with the buffer, potentially leading to...

PT-2023-1488 · Amd · Amd System Management Unit +2

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified AMD System Management Unit SMU affected versions not specified AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to errors in...

PT-2023-1403 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to insufficient input validation in the ASP, which may allow an attacker with physical access to gain unauthorized write access to memory. This could...

PT-2023-1406 · Amd · Amd Processors

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the SNP INIT command for the AMD processor firmware loading mode. This could allow a remote attacker to...

PT-2023-1373 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient input validation in the SMU, which may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus, potentially...

AMD Client Vulnerabilities – January 2023

Bulletin ID: AMD-SB-1031 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary In collaboration with various third parties, AMD platforms were audited for potential security exposures. Potential vulnerabilities in AMD Secure Processor ASP,...

PT-2023-1471 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient input validation in the System Management Unit SMU of AMD processors. This may allow an attacker to improperly lock resources,...

AMD Client UEFI Firmware January 2023 Security Updates

AMD® has informed HP of potential vulnerabilities identified in the AMD client platform firmware components which might allow arbitrary code execution and/or denial of service. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential...

PT-2023-1371 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bound checks in the SMU, which may allow an attacker to update the from/to address space to an invalid value, potentially resulti...

PT-2023-1374 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bound checks in the SMU, which may allow an attacker to update the SRAM from/to address space to an invalid value, potentially...

PT-2023-1366 · Amd · Amd Bios

Name of the Vulnerable Software and Affected Versions: AMD BIOS affected versions not specified Description: The issue is related to insufficient input validation of BIOS mailbox messages in SMU, which may result in out-of-bounds memory reads, potentially leading to a denial of service. This can ...

PT-2023-1402 · Amd · Amd Bios +1

Name of the Vulnerable Software and Affected Versions: AMD BIOS affected versions not specified Description: The issue is related to insufficient validation in ASP BIOS and DRTM commands, which may allow malicious supervisor x86 software to disclose the contents of sensitive memory, resulting in...

PT-2023-1484 · Amd · Amd Secure Encrypted Virtualization

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to insufficient input validation in the implementation of AMD Secure Encrypted Virtualization SEV microcode in AMD processors. This coul...

PT-2023-12087 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor affected versions not specified Description: The issue is related to the failure to validate the integer operand in the ASP bootloader, which may allow an attacker to introduce an integer overflow in the L2 directory tabl...

PT-2023-1404 · Amd · Amd Secure Encrypted Virtualization-Encrypted State

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization-Encrypted State SEV-ES affected versions not specified Description: The issue is related to insufficient bounds checking in the implementation of AMD Secure Encrypted Virtualization-Encrypted State SEV-ES...

PT-2023-1483 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to a Time-of-Check-to-Time-of-Use TOCTOU vulnerability in the ASP, which may allow a physical attacker to write beyond buffer bounds. This could...

PT-2023-1409 · Amd · Amd Processor Security

Name of the Vulnerable Software and Affected Versions: AMD processor security software affected versions not specified Description: The issue is related to insufficient input validation during the parsing of the System Management Mode SMM binary, which may allow a maliciously crafted SMM executab...

PT-2023-1408 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor affected versions not specified Description: The issue is related to insufficient validation of address mapping to IO in the AMD Secure Processor, which may result in a loss of memory integrity in the SNP guest. This coul...