CVE-2022-23831

CVE-2022-23831 affects AMD μProf. The issue is insufficient validation of the IOCTL input buffer, which can allow an attacker to send an arbitrary buffer and cause a Windows kernel crash, leading to a denial of service. Affected product: AMD μProf across Windows/Linux, per AMD bulletin AMD-SB-104...

CVE-2022-23831

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service...

CVE-2022-23831

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service...

CVE-2022-27674

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service...

CVE-2022-27674

AMD μProf is affected by CVE-2022-27674 due to insufficient validation of the IOCTL input/output buffer, potentially allowing bypass of bounds checks and causing a Windows kernel crash with denial of service. The AMD security bulletin AMD-SB-1046 describes the condition and lists affected platfor...

CVE-2022-27674

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service...

CVE-2021-26360

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP...

CVE-2021-26360

CVE-2021-26360 describes a local-attack vulnerability in the AMD Secure Processor (ASP) where an attacker with local access can modify the security configuration of the SOC registers, potentially corrupting the ASP’s encrypted memory and enabling arbitrary code execution in the ASP environment. T...

CVE-2021-26360

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP...

CVE-2020-12930

Improper parameters handling in AMD Secure Processor ASP drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

CVE-2021-26393

CVE-2021-26393 describes insufficient memory cleanup in the AMD Secure Processor (ASP) TEE, which could allow an authenticated user with privileges to generate a valid signed TA and potentially poison process memory, leading to confidentiality loss. The connected AMD security bulletin (AMD-SB-500...

CVE-2020-12930

CVE-2020-12930 is an AMD ASP/PSP driver vulnerability described as improper parameter handling that could allow a privileged attacker to elevate privileges, potentially compromising integrity. The AMD security bulletin AMD-SB-5001 maps this CVE to various AMD Embedded/ Ryzen platforms and provide...

CVE-2020-12931

Improper parameters handling in the AMD Secure Processor ASP kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...

CVE-2020-12931

The CVE-2020-12931 issue affects the AMD Secure Processor (ASP) kernel, caused by improper parameter handling, enabling a privileged attacker to elevate privileges and potentially compromise integrity. AMD’s AMD-SB-5001 bulletin maps this vulnerability across ASP/PSP components (ASP kernel) and p...

CVE-2022-23824

A flaw was found in hw. The AMD CPUs can be attacked similar to the previously known Spectre Variant 2 CVE-2017-5715. This issue affects AMD CPUs where the OS relies on IBPB to flush the return address predictor. As a result, an unprivileged attacker could use this flaw to cross the syscall and...

PT-2022-8398 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP kernel affected versions not specified Description: The issue is related to improper parameters handling in the kernel, which may allow a privileged attacker to elevate their privileges, potentially leading to loss of...

PT-2022-18564 · Amd · Amd Link Android App

Name of the Vulnerable Software and Affected Versions: AMD Link Android app affected versions not specified Description: The issue is related to insufficient access controls, which may potentially result in information disclosure. Recommendations: At the moment, there is no information about a...

PT-2022-9757 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE. This may allow an authenticated attacker with...

PT-2022-16286 · Amd · Amd Μprof

Name of the Vulnerable Software and Affected Versions: AMD μProf affected versions not specified Description: The issue is related to insufficient validation of the IOCTL input buffer, which may allow an attacker to send an arbitrary buffer. This could lead to a potential Windows kernel crash,...