# 3rd Gen AMD EPYC™.

Every CVE that names 3rd Gen AMD EPYC™ among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Out-of-bounds write in 2nd Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2023-20524.md)
  `CVE-2023-20524` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 May 2023 · Tags: Memory corruption
- [Out-of-bounds write in 1st Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2023-20520.md)
  `CVE-2023-20520` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 May 2023 · Tags: Memory corruption
- [Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity.](https://agentprime.io/advisories/CVE-2022-23818.md)
  `CVE-2022-23818` · CVE record: AMD 3rd Gen AMD EPYC™ · CVSS 7.5 High · Not analysed yet · Published 9 May 2023
- [Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution.](https://agentprime.io/advisories/CVE-2021-46775.md)
  `CVE-2021-46775` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 May 2023
- [Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.](https://agentprime.io/advisories/CVE-2021-46769.md)
  `CVE-2021-46769` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · CVSS 8.8 High · Not analysed yet · Published 9 May 2023
- [Out-of-bounds write in 2nd Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-46764.md)
  `CVE-2021-46764` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 May 2023 · Tags: Memory corruption
- [Out-of-bounds write in 2nd Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-46763.md)
  `CVE-2021-46763` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 May 2023 · Tags: Memory corruption
- [Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.](https://agentprime.io/advisories/CVE-2021-46762.md)
  `CVE-2021-46762` · CVE record: AMD 2nd Gen AMD EPYC™ and 3 more · CVSS 3.9 Low · Not analysed yet · Published 9 May 2023
- [Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability.](https://agentprime.io/advisories/CVE-2021-26397.md)
  `CVE-2021-26397` · CVE record: AMD 3rd Gen AMD EPYC™ · CVSS 7.1 High · Not analysed yet · Published 9 May 2023
- [Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.](https://agentprime.io/advisories/CVE-2021-26379.md)
  `CVE-2021-26379` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 May 2023
- [Improper input validation in 3rd Gen AMD EPYC™](https://agentprime.io/advisories/CVE-2021-46771.md)
  `CVE-2021-46771` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 10 May 2022 · Tags: CWE-20
- [A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.](https://agentprime.io/advisories/CVE-2021-26324.md)
  `CVE-2021-26324` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 10 May 2022
- [Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.](https://agentprime.io/advisories/CVE-2021-26332.md)
  `CVE-2021-26332` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 10 May 2022
- [Improper input validation in 2nd Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-26370.md)
  `CVE-2021-26370` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · No CVSS score · Not analysed yet · Published 10 May 2022 · Tags: CWE-20
- [Improper input validation in 3rd Gen AMD EPYC™](https://agentprime.io/advisories/CVE-2021-26325.md)
  `CVE-2021-26325` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-20
- [Heap-based buffer overflow in 1st Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-26330.md)
  `CVE-2021-26330` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: Memory corruption
- [Improper input validation in 3rd Gen AMD EPYC™](https://agentprime.io/advisories/CVE-2021-26327.md)
  `CVE-2021-26327` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-20
- [Improper input validation in 3rd Gen AMD EPYC™](https://agentprime.io/advisories/CVE-2021-26323.md)
  `CVE-2021-26323` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-20
- [Improper input validation in 2nd Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2020-12961.md)
  `CVE-2020-12961` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-20
- [Insufficient verification of data authenticity in 3rd Gen AMD EPYC™](https://agentprime.io/advisories/CVE-2021-26315.md)
  `CVE-2021-26315` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-345
- [Protection mechanism failure in 1st Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2020-12954.md)
  `CVE-2020-12954` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-693
- [Improper input validation in 1st Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-26331.md)
  `CVE-2021-26331` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-20
- [Improper input validation in 1st Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-26321.md)
  `CVE-2021-26321` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-20
- [Improper certificate validation in 1st Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-26320.md)
  `CVE-2021-26320` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: Weak cryptography or TLS
- [Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.](https://agentprime.io/advisories/CVE-2021-26322.md)
  `CVE-2021-26322` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-320
- [AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.](https://agentprime.io/advisories/CVE-2021-26329.md)
  `CVE-2021-26329` · CVE record: AMD 1st Gen AMD EPYC™ and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-130
- [Improper access control in 2nd Gen AMD EPYC™ and others](https://agentprime.io/advisories/CVE-2021-26338.md)
  `CVE-2021-26338` · CVE record: AMD 2nd Gen AMD EPYC™ and 1 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: Broken access control
- [Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.](https://agentprime.io/advisories/CVE-2021-26326.md)
  `CVE-2021-26326` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-665

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=3rd-gen-amd-epyctm>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/3rd-gen-amd-epyctm/>. Everything for agents: <https://agentprime.io/llms.txt>.