<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: amd-athlontm-3000-series-mobile-processors-with-radeontm-graphics-pollock</title><description>Every new CVE for amd-athlontm-3000-series-mobile-processors-with-radeontm-graphics-pollock.</description><link>https://agentprime.io/</link><item><title>CVE-2022-23821: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.</title><link>https://agentprime.io/advisories/CVE-2022-23821/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23821/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:54:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…</title><link>https://agentprime.io/advisories/CVE-2023-20521/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20521/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:52:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.</title><link>https://agentprime.io/advisories/CVE-2022-23820/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23820/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2023 18:52:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-20555: Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary co…</title><link>https://agentprime.io/advisories/CVE-2023-20555/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-20555/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Aug 2023 17:07:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-46794: Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2021-46794/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46794/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 19:01:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-46759: Out-of-bounds write in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2021-46759/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46759/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 19:00:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-46756: Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…</title><link>https://agentprime.io/advisories/CVE-2021-46756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46756/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 19:00:35 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-46754: Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…</title><link>https://agentprime.io/advisories/CVE-2021-46754/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46754/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 19:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-46753: Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwr…</title><link>https://agentprime.io/advisories/CVE-2021-46753/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46753/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 19:00:04 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-46749: Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” and others</title><link>https://agentprime.io/advisories/CVE-2021-46749/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-46749/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:59:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26406: Insufficient validation in parsing Owner&apos;s Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resul…</title><link>https://agentprime.io/advisories/CVE-2021-26406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26406/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:59:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26371: A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.</title><link>https://agentprime.io/advisories/CVE-2021-26371/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26371/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:59:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26365: Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2021-26365/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26365/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:58:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-26354: Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others</title><link>https://agentprime.io/advisories/CVE-2021-26354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-26354/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 May 2023 18:58:37 GMT</pubDate><category>CVE</category></item></channel></rss>