Advisories · Technology

4th Gen AMD EPYC™ Processors.

Every CVE that names 4th Gen AMD EPYC™ Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-20577 CVE record

CVSS 7.4 High

Stack-based buffer overflow in 2nd Gen AMD EPYC™ Processors and others
- 2nd Gen AMD EPYC™ Processors
- 3rd Gen AMD EPYC™ Processors
- Memory corruption
Not analysed yet 2 Sept 2026
CVE-2023-31315 CVE record

CVSS 7.5 High

Code injection in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 1st Gen AMD EPYC™ Processors
- Code injection
Not analysed yet 9 Aug 2024
CVE-2024-21980 CVE record

CVSS 7.9 High

Buffer overflow in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- Memory corruption
Not analysed yet 5 Aug 2024
CVE-2024-21978 CVE record

CVSS 6.0 Medium

Improper input validation in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- CWE-20
Not analysed yet 5 Aug 2024
CVE-2023-31355 CVE record

CVSS 6.0 Medium

Buffer overflow in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- Memory corruption
Not analysed yet 5 Aug 2024
CVE-2023-20587 CVE record

CVSS 7.1 High

Improper access control in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- Broken access control
Not analysed yet 13 Feb 2024
CVE-2023-31347 CVE record

CVSS 4.9 Medium

Incorrect calculation in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- CWE-682
Not analysed yet 13 Feb 2024
CVE-2023-31346 CVE record

CVSS 6.0 Medium

Improper access control in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- Broken access control
Not analysed yet 13 Feb 2024
CVE-2023-20573 CVE record

CVSS 3.2 Low

Debug Exception Delivery in Secure Nested Paging
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
- CWE-693
Not analysed yet 11 Jan 2024
CVE-2023-20566 CVE record

CVSS 5.3 Medium

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
Not analysed yet 14 Nov 2023
CVE-2023-20519 CVE record

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest inte…
- 3rd Gen AMD EPYC™ Processors
- 4th Gen AMD EPYC™ Processors
Not analysed yet 14 Nov 2023
CVE-2021-26345 CVE record

CVSS 1.9 Low

Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
- 2nd Gen AMD EPYC™ Processors
- 3rd Gen AMD EPYC™ Processors
Not analysed yet 14 Nov 2023
CVE-2021-46774 CVE record

CVSS 6.7 Medium

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
Not analysed yet 14 Nov 2023
CVE-2021-46766 CVE record

CVSS 2.5 Low

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
- AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS
- 4th Gen AMD EPYC™ Processors
Not analysed yet 14 Nov 2023
CVE-2023-20575 CVE record

CVSS 6.5 Medium

Observable discrepancy in 1st Gen AMD EPYC™ Processors and others
- 1st Gen AMD EPYC™ Processors
- 2nd Gen AMD EPYC™ Processors
- Information disclosure
Not analysed yet 11 Jul 2023