<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: 2nd-gen-amd-epyctm-processors</title><description>Every new CVE for 2nd-gen-amd-epyctm-processors.</description><link>https://agentprime.io/</link><item><title>CVE-2023-20577: Stack-based buffer overflow in 2nd Gen AMD EPYC™ Processors and others</title><link>https://agentprime.io/advisories/CVE-2023-20577/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20577/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 19:57:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-31315: Code injection in 3rd Gen AMD EPYC™ Processors and others</title><link>https://agentprime.io/advisories/CVE-2023-31315/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-31315/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Aug 2024 17:08:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23829: Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and others</title><link>https://agentprime.io/advisories/CVE-2022-23829/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23829/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Jun 2024 19:01:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20587: Improper access control in 3rd Gen AMD EPYC™ Processors and others</title><link>https://agentprime.io/advisories/CVE-2023-20587/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20587/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Feb 2024 19:31:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20592: Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential l…</title><link>https://agentprime.io/advisories/CVE-2023-20592/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20592/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:54:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26345: Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.</title><link>https://agentprime.io/advisories/CVE-2021-26345/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26345/</guid><description>CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:53:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.</title><link>https://agentprime.io/advisories/CVE-2023-20533/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20533/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:52:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.</title><link>https://agentprime.io/advisories/CVE-2023-20526/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20526/</guid><description>CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:52:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…</title><link>https://agentprime.io/advisories/CVE-2023-20521/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20521/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:52:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-46774: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.</title><link>https://agentprime.io/advisories/CVE-2021-46774/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46774/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:52:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20593: Sensitive information in error messages in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2023-20593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20593/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Jul 2023 19:38:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20575: Observable discrepancy in 1st Gen AMD EPYC™ Processors and others</title><link>https://agentprime.io/advisories/CVE-2023-20575/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20575/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Jul 2023 18:29:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-46756: Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…</title><link>https://agentprime.io/advisories/CVE-2021-46756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46756/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 19:00:35 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-26406: Insufficient validation in parsing Owner&apos;s Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resul…</title><link>https://agentprime.io/advisories/CVE-2021-26406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26406/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:59:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26371: A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.</title><link>https://agentprime.io/advisories/CVE-2021-26371/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26371/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:59:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26356: Time-of-check time-of-use race condition in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2021-26356/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26356/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:58:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26354: Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2021-26354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26354/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:58:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-27672: When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.</title><link>https://agentprime.io/advisories/CVE-2022-27672/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-27672/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Feb 2023 19:34:54 GMT</pubDate><category>CVE</category></item></channel></rss>