ROS-20241209-01

A vulnerability in AMD EPYC™ AGESA™ PI packages is related to incorrect input and range validation in the header of an AMD Secure Processor ASP bootloader image. of the AMD Secure Processor ASP bootloader image. Exploitation of the vulnerability could allow an attacker to, use attacker-controlled...

CVE-2021-26334

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user...

CVE-2021-26334

CVE-2021-26334 affects AMD μProf Tool via the AMDPowerProfiler.sys driver. The root cause is improper access control that could let a low-privilege user access MSRs in the kernel, enabling privilege escalation and potential ring-0 code execution. Affected product: AMD μProf (AMDuProf). Exploitati...