AMD EPYC™ 9005 Series Processors.

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), p…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 9005 Series Processors
• CWE-1262

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code executio…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 9005 Series Processors
• CWE-1233

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-1233

Resource exposure in AMD EPYC™ 9004 Series Processors and others

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• Information disclosure
• CWE-648

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, poten…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-414

Buffer overflow in AMD EPYC™ 7001 Series Processors and others

• AMD EPYC™ 7001 Series Processors
• AMD EPYC™ 7002 Series Processors
• Memory corruption

Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or int…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 9005 Series Processors
• Memory corruption

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU.

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• CWE-1301

Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SEV-SNP guest memory…

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• CWE-390

Use after free in AMD EPYC™ 9004 Series Processors and others

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• Memory corruption

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-1220

Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.

• AMD EPYC™ 9005 Series Processors
• AMD Ryzen™ 9000HX Series Processors
• CWE-1189

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-665

Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity.

• AMD EPYC™ 9005 Series Processors
• CWE-1284

Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in…

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• CWE-1260

Improper access control in AMD EPYC™ 9004 Series Processors and others

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• Broken access control

Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-1274

Use of uninitialized variable in AMD EPYC™ 9005 Series Processors and others

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• Memory corruption

Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-1231

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potent…

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• CWE-1220

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory int…

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• CWE-1260

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 9005 Series Processors
• CWE-123

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insuffic…

• AMD Ryzen™ 9000HX Series Processors
• AMD EPYC™ 9005 Series Processors
• CWE-333

Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 9005 Series Processors
• CWE-459

Incomplete cleanup in AMD EPYC™ 9005 Series Processors and others

• AMD EPYC™ 9005 Series Processors
• AMD Ryzen™ AI 300 Series Processors
• CWE-459