PT-2024-19124 · Amd · Amd Ryzen Master Utility

Name of the Vulnerable Software and Affected Versions: AMD Ryzen Master Utility affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Ryzen Master Utility, which could allow an attacker to achieve privilege...

AMD Ryzen Master Monitoring SDK November 2024 Security Update

AMD has informed HP of a potential vulnerability identified in the AMD Ryzen™ Master Monitoring SDK, which might allow arbitrary code execution. AMD has released software updates to mitigate the potential vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...

PT-2024-19123 · Amd · Amd Ryzen Master

Name of the Vulnerable Software and Affected Versions: AMD Ryzen Master affected versions not specified Description: The issue is related to incorrect default permissions in the AMD Ryzen Master monitoring SDK installation directory. This could allow an attacker to achieve privilege escalation,...

Ryzen™ Master Monitoring SDK & AMD Ryzen™ Master Utility Incorrect Default Permission Vulnerabilities

Bulletin ID: AMD-SB-9004 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary The AMD Ryzen™ Master Monitoring SDK is a public distribution that is designed to allow software developers to add processor and memory functions to their own utilities...

AMD Ryzen™ AI Software

Bulletin ID: AMD-SB-7017 Potential Impact: Arbitrary Code Execution, System Crash Severity: High Summary AMD Ryzen™ AI Software includes the tools and runtime libraries for optimizing and deploying AI inference on AMD Ryzen™ AI powered PCs. Ryzen™ AI software enables applications to run on the...

PT-2025-14528 · Amd · Amd Ryzen Ai

Name of the Vulnerable Software and Affected Versions: AMD RyzenTM AI affected versions not specified Description: The issue is related to incorrect default permissions on the AMD RyzenTM AI installation folder, which could allow an attacker to achieve privilege escalation, potentially resulting ...

CVE-2024-46746

The CVE-2024-46746 issue affects the Linux kernel HID AMD SFH driver (amd_sfh). The root cause is freeing driver_data after hid_destroy_device() returns, since driver_data is referenced by callbacks; this can lead to a slab-use-after-free in functions such as amd_sfh_get_report, as evidenced by t...

Client Vulnerabilities – Aug 2024

Bulletin ID: AMD-SB-4004 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Secure Processor ASP, and other platform components were reported. Mitigations are being provided in Platform Initialization PI...

AMD Ryzen Security Breach

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Ryzen that stems from a potential issue in the SPI protection feature that could allow an attacker with kernel-mode access to bypass the native system management mode ROM protecti...

SPI Lock Bypass

Bulletin ID: AMD-SB-1041 Potential Impact: System Integrity Severity: High Summary Potential weaknesses in AMD’s SPI protection features may allow an attacker to bypass the native System Management Mode SMM ROM protections. CVE Details CVE-2022-23829 A potential weakness in AMD SPI protection...

PT-2024-12272

Name of the Vulnerable Software and Affected Versions AMD EPYC Processors affected versions not specified AMD Ryzen Processors affected versions not specified AMD Threadripper Processors affected versions not specified Description The issue is related to improper validation in a model specific...

ryzen-master.com Cross Site Scripting vulnerability OBB-3905377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AMD Processor Vulnerabilities

Bulletin ID: AMD-SB-7009 Potential Impact: Refer to the CVE Details section Severity: Refer to the CVE Details section Summary Researchers disclosed multiple potential vulnerabilities that may impact some AMD processors. AMD has assessed the researchers’ findings and is publishing CVEs and...

The vulnerability of the System Management Mode (SMM) feature of AMD Ryzen microprogramming systems allows attackers to enhance their privileges and compromise the integrity, accessibility, and confidentiality of protected information.

The vulnerability of the System Management Mode SMM feature of AMD Ryzen microprocessor-based software systems is related to insufficient validation of input data. Exploiting this vulnerability can allow unauthorized actors to gain enhanced privileges and impact the integrity, availability, and...

AMD Ryzen Master™ SDK August 2023 Security Update

AMD has informed HP of potential security vulnerabilities identified in the AMD® Ryzen Master™ SDK, which might allow arbitrary code execution, denial of service, or information disclosure. AMD has released software updates to mitigate the potential vulnerabilities. AMD has released updates to...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Additionally, a cross site scripting issue was found. These have been addressed in the update. Vulnerability Details CVEID:CVE-2020-22218 DESCRIPTION: libssh...

AMD Ryzen Security Breach

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. AMD Ryzen suffers from a security vulnerability that stems from incorrect input validation in the SMM Supervisor that could allow an attacker with a compromised SMI handler to gain Ring0 access, which could lead to...

AMD SMM Supervisor Vulnerability Security Notice

Bulletin ID: AMD-SB-7011 Potential Impact: Loss of confidentiality, integrity, and availability Severity: High Summary External researchers reported a potential vulnerability during SMM Supervisor initialization which may impact some AMD processors. On systems that do not have Supervisor Mode...

AMD Client Vulnerabilities – November 2023

Bulletin ID: AMD-SB-4002 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Secure Processor ASP, AMD System Management Unit SMU, and other platform components were reported, and mitigations are being...

AMD Graphics Driver Vulnerabilities – November 2023

Bulletin ID: AMD-SB-6003 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD received reports of vulnerabilities potentially affecting some AMD Graphics products. Refer to the CVE Details section for information about each CVE. CVE...