Advisories · Technology
1st Gen AMD EPYC™.
Every CVE that names 1st Gen AMD EPYC™ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- Memory corruption
-
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
-
Heap-based buffer overflow in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- Memory corruption
-
Protection mechanism failure in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-693
-
Improper input validation in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-20
-
Improper input validation in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-20
-
Improper certificate validation in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- Weak cryptography or TLS
-
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-320
-
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-130