Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 3 days ago6 views

CVE-2025-48521

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS5.5AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2026/05/15 2:16 a.m.5 views

CVE-2025-48521

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS0.00016EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/15 1:45 a.m.7 views

EUVD-2025-209863

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/15 1:45 a.m.33 views

CVE-2025-48521

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS0.00016EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/15 1:45 a.m.5 views

CVE-2025-48521

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References2
CVE
CVE
added 2026/05/15 1:45 a.m.12 views

CVE-2025-48521

The CVE-2025-48521 case affects the AMD Secure Processor (ASP) PCI driver. The vulnerability stems from improper input validation in the ASP PCI driver, enabling a local attacker to trigger a use-after-free condition that could compromise platform integrity or cause a crash. Affected component: A...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/15 1:45 a.m.3 views

CVE-2025-48521

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/15 12:0 a.m.8 views

PT-2026-41231

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-13193

Malware in sbrugna...

3.9CVSS6.2AI score0.00022EPSS
Exploits0References3
NVD
NVD
added 2025/09/06 7:15 p.m.1 views

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

4.7CVSS0.00021EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/06 6:35 p.m.7 views

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

4.7CVSS0.00021EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/06 12:0 a.m.1 views

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that stems from insufficient parameter cleanup, which could lead an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART command, resulting in a loss of...

4.7CVSS6.5AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2025/07/29 5:15 a.m.1 views

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

6.5CVSS6AI score0.0041EPSS
Exploits0References1
NVD
NVD
added 2025/07/29 5:15 a.m.2 views

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

6.5CVSS0.0041EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/29 12:0 a.m.3 views

PT-2025-31169 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: An execution after redirect in Samsung DMS Data Management Server allows attackers to execute limited functions without permissions. An attacker could compromise...

6.5CVSS6.7AI score0.0041EPSS
Exploits0References6
Packet Storm News
Packet Storm News
added 2025/06/22 12:0 a.m.4 views

Risks & Benefits of LLMs & GenAI for Platform Integrity, Healthcare Diagnostics, Cybersecurity, Privacy & AI Safety: a Comprehensive Survey, Roadmap & Implementation Blueprint

Large Language Models LLMs and generative AI GenAI systems such as ChatGPT, Claude, Gemini, LLaMA, and Copilot, developed by OpenAI, Anthropic, Google, Meta, and Microsoft are reshaping digital platforms and app ecosystems while introducing key challenges in cybersecurity, privacy, and platform...

6.7AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/06/22 12:0 a.m.2 views

Risks and Benefits of LLMs and GenAI for Platform Integrity, Healthcare Diagnostics, Cybersecurity, Privacy and AI Safety: a Comprehensive Survey, Roadmap and Implementation Blueprint

Large Language Models LLMs and generative AI GenAI systems such as ChatGPT, Claude, Gemini, LLaMA, and Copilot, developed by OpenAI, Anthropic, Google, Meta, and Microsoft are reshaping digital platforms and app ecosystems while introducing key challenges in cybersecurity, privacy, and platform...

6.7AI score
Exploits0
Cvelist
Cvelist
added 2024/10/16 7:52 a.m.16 views

CVE-2024-45693 Apache CloudStack: Request origin validation bypass makes account takeover possible

Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests. This can allow an attacker to gain privileges and access to resources of the authenticated users and may lead to account...

8CVSS0.00144EPSS
Exploits0References2
NVD
NVD
added 2024/08/13 5:15 p.m.6 views

CVE-2021-26387

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity...

3.9CVSS0.00022EPSS
Exploits0References2
CVE
CVE
added 2024/08/13 4:50 p.m.34 views

CVE-2021-26387

CVE-2021-26387 describes insufficient access controls in the AMD ASP kernel that could allow a privileged attacker with access to AMD signing keys and BIOS/UEFI shell to map DRAM regions into protected areas, risking platform integrity. Public documents indicate this CVE is tracked within AMD sec...

3.9CVSS7AI score0.00022EPSS
Exploits0References2
Rows per page
Query Builder