Advisories · Technology
2nd Gen AMD EPYC™.
Every CVE that names 2nd Gen AMD EPYC™ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Out-of-bounds write in 2nd Gen AMD EPYC™ and others
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Out-of-bounds write in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- Memory corruption
- CVSS 6.8 Medium
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution.
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- CVSS 8.8 High
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- CVSS 7.5 High
Out-of-bounds write in 2nd Gen AMD EPYC™ and others
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in 2nd Gen AMD EPYC™ and others
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- Memory corruption
- CVSS 3.9 Low
Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- CVSS 9.8 CriticalCritical · CVSS 9+
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
-
Improper input validation in 2nd Gen AMD EPYC™ and others
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- CWE-20
-
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
-
Heap-based buffer overflow in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- Memory corruption
-
Improper input validation in 2nd Gen AMD EPYC™ and others
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- CWE-20
-
Protection mechanism failure in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-693
-
Improper input validation in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-20
-
Improper input validation in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-20
-
Improper certificate validation in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- Weak cryptography or TLS
-
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-320
-
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-130
-
Improper access control in 2nd Gen AMD EPYC™ and others
- 2nd Gen AMD EPYC™
- 3rd Gen AMD EPYC™
- Broken access control