Input validation

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service...

CVE-2021-46792

Time-of-check Time-of-use TOCTOU in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service...

CVE-2021-46762

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service...

CVE-2021-46762

CVE-2021-46762 is an AMD SMU/ASP input-validation vulnerability: insufficient validation in the System Management Unit (SMU) may allow corruption of SMU SRAM, risking integrity or availability. Affected products include AMD ASP/SMU components in AMD Embedded processors; exploitation details are n...

CVE-2021-46762

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service...

PT-2024-38: Improper Access Control in GigaDevice Semiconductor products

The vulnerability of improper access control was identified in series GD32E23x and GD32E50x of GigaDevice Semiconductor products. The vulnerability allows an attacker to obtain a snapshot of SRAM or change its state. The vulnerability can be exploited when checking the protection state...

CVE-2023-20531

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service...

Design/Logic Flaw

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service...

AMD System Management Unit(SMU) 缓冲区错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit SMU that stems from inadequate boundary checking and could allow an attacker to update SRAM from/to address space to an invalid value,...

CVE-2023-20531

CVE-2023-20531 affects the AMD System Management Unit (SMU) in AMD EPYC platforms. The root cause is insufficient bound checks in SMU, allowing an attacker to update SRAM between address spaces to an invalid value, which can lead to a denial of service. Connected documents provide concrete detail...

CVE-2023-20531

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service...

PT-2025-41044

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a reference count leak bug in the omap4 sram init function when using ARM OMAP2+ platforms. The of find compatible node function increments the reference count ...

AMD CPUs Denial of Service Vulnerability

AMD CPUs are a family of CPUs from AMD U.S.A. A denial of service vulnerability exists in AMD CPUs, which stems from insufficient boundary checking in the SMU mailbox registers. An attacker could exploit the vulnerability to read content outside of the SRAM address range resulting in a potential...

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

Out-of-bounds

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

GSD-2022-1002486 ARM: mmp: Fix failure to remove sram device

ARM: mmp: Fix failure to remove sram device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002419 ARM: mmp: Fix failure to remove sram device

ARM: mmp: Fix failure to remove sram device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1002334 ARM: mmp: Fix failure to remove sram device

ARM: mmp: Fix failure to remove sram device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002039 ARM: mmp: Fix failure to remove sram device

ARM: mmp: Fix failure to remove sram device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...