The vulnerability of the Platform Loader and Manager (PLM) software on AMD Versal and Alveo microprogrammable devices allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Platform Loader and Manager PLM microprogramming devices from AMD Versal and Alveo arises from the lack of a mechanism to reset the Secure Stream Switch SSS configuration after cryptographic operations are performed. Exploiting this vulnerability can allow an intruder to...

EUVD-2021-17277

Malware in sbrugna...

PT-2025-24579 · Amd · Amd Versal Adaptive Soc

Name of the Vulnerable Software and Affected Versions: AMD Versal Adaptive SoC devices affected versions not specified Description: The issue arises from the incorrect configuration of the Secure Stream Switch SSS during runtime, specifically after the system has booted, which could cause data to...

PT-2025-48916

Уязвимость прошивки Platform Loader and Manager PLM микропрограммных устройств AMD Versal и Alveo вызвана отсутствием сброса конфигурации Secure Stream Switch SSS после выполнения криптографических операций. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ...

Versal™ Adaptive SoC – Improper Configuration of the Secure Stream Switch during Post-Boot Cryptographic Operations

AMD ID: AMD-SB-8011 Potential Impact: N/A Severity: N/A Summary In Versal™ Adaptive SoC devices, the Platform Loader and Manager PLM implements runtime post-boot software services that allows a remote processor to command the PLM to execute cryptographic operations – including AES, SHA3, RSA, ECD...

CVE-2021-35080

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-30345

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30346

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30346

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

Input validation

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

Input validation

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

Information disclosure

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35070

CVE-2021-35070 involves Qualcomm closed‑source components where RPM secure stream can access any secure resource due to misconfigured SMMU, potentially causing information disclosure on Snapdragon Industrial IOT and Snapdragon Mobile. The root cause is improper SMMU configuration that grants acce...

CVE-2021-35070

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30346

CVE-2021-30346 concerns a misconfiguration of the SMMU that allows the RPM secure stream to access any secure resource across Qualcomm Snapdragon products (Industrial IoT, Mobile, Wearables, and Networking). The vulnerability stems from improper SMMU configuration, enabling local access to secure...

CVE-2021-30345

CVE-2021-30345 describes an improper SMMU configuration in Qualcomm RPM secure Stream that can allow access to any secure resource. The initial entry lists affected Qualcomm Snapdragon lines (Industrial IOT, Mobile, Wearables, Wired Infrastructure and Networking) and notes the root cause as a mis...

CVE-2021-30345

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30346: Undefined Security Weakness

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-35080: Exposure of Sensitive Information to an Unauthorized Actor

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

PT-2022-10009 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...