CVE-2020-12965

CVE-2020-12965 describes transient execution of non-canonical accesses on AMD CPUs, where specific software sequences may cause non-canonical loads and stores to be executed using only the lower 48 address bits, potentially leaking data. The root cause is non-canonical address handling that can l...

CVE-2021-26346

CVE-2021-26346 affects AMD Secure Processor (ASP) bootloader: failure to validate the integer operand can enable an integer overflow in the L2 directory table in SPI flash, leading to potential denial of service. Affected by several AMD/industry advisories; mitigation requires firmware/BIOS updat...

CVE-2023-20571

CVE-2023-20571 describes a race condition in AMD System Management Mode (SMM) code that, if exploited by a compromised user-space process, could facilitate privilege escalation by leveraging CVE-2018-8897. The connected AMD advisories confirm this issue under AMD SB-5001/AMD SB-4002 families with...

CVE-2023-20563

CVE-2023-20563 is a documented AMD/PI firmware vulnerability affecting System Management Mode (SMM) with local privilege escalation potential. The Connected AMD bulletin entries (AMD-SB-5001 and AMD-SB-4002) describe multiple affected AMD embedded platforms and indicate mitigations via Platform I...

CVE-2023-20565

CVE-2023-20565 is documented in AMD’s embedded/PI firmware advisories (AMD-SB-5001 and related) as a high-severity issue where insufficient protections in System Management Mode (SMM) could allow privilege escalation via local access. The connected AMD bulletin provides mitigations via Platform I...

CVE-2021-26337

The CVE-2021-26337 issue is an AMD SMU (System Management Unit) DRAM address validation flaw. It can permit a DMA read from an invalid DRAM address into SRAM, causing the SMU to stop servicing further requests. Mitigations are provided by AMD/AGSIA: update to the specified AGESA PI software versi...