CVE-2023-20530

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

CVE-2023-20530

CVE-2023-20530 concerns the AMD System Management Unit (SMU) on AMD EPYC-based platforms. It involves insufficient input validation of BIOS mailbox messages in SMU, which can cause out-of-bounds memory reads and potentially lead to a denial of service. Public sources consistently describe the aff...

CVE-2023-20530

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

CVE-2023-20522

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service...

CVE-2023-20522

CVE-2023-20522 pertains to the AMD Secure Processor (ASP). The issue is described as insufficient input validation in ASP, with a potential attacker who has a malicious BIOS able to cause a denial of service. Public documentation lists affected components as ASP BIOS/firmware, with impact limited...

CVE-2023-20522

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service...

CVE-2022-23814

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment...

CVE-2022-23814

CVE-2022-23814 describes a failure to validate addresses provided by software to BIOS commands, which may cause loss of integrity of guest memory in confidential compute environments. The vulnerability is tied to AMD platform components (SBIOS/ASP/SMU/ BIOS mailbox handling) and is documented und...

CVE-2022-23814

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment...

CVE-2021-26402

Insufficient bounds checking in ASP AMD Secure Processor firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability...

CVE-2021-26402

CVE-2021-26402 describes insufficient bounds checking in the AMD Secure Processor (ASP) firmware during BIOS mailbox handling, enabling an attacker to write partially controlled data out-of-bounds into SMM or SEV-ES regions and potentially compromise integrity and availability. The issue is discu...

CVE-2021-26402

Insufficient bounds checking in ASP AMD Secure Processor firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability...

CVE-2021-26343

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure...

CVE-2021-26343

CVE-2021-26343 describes insufficient validation in AMD’s ASP BIOS and DRTM commands, potentially allowing malicious supervisor x86 software to disclose memory contents (information disclosure). The vulnerability is linked to the AMD Secure Processor (ASP) and BIOS/DRTM handling, with impact limi...

CVE-2021-26343

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure...

CVE-2021-46795

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

CVE-2021-46795

CVE-2021-46795 is a TOCTOU vulnerability where a compromised BIOS can trigger the TEE OS to read memory out-of-bounds, potentially causing a denial of service. Public details consistently describe the affected component as the TEE/ASP-SMU hardware stack in AMD platforms with BIOS-based mitigation...

CVE-2021-26316

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM System Management Mode arbitrary code execution...

CVE-2021-26316

CVE-2021-26316 describes a BIOS-level input/communication buffer validation flaw in AMD platforms that may allow a local attacker with low privileges to tamper BIOS buffers and trigger SMM (System Management Mode) arbitrary code execution. Connected sources confirm the root cause is inadequate va...

CVE-2021-26316

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM System Management Mode arbitrary code execution...