AMD EPYC™ Embedded 7002.

Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors and others

• AMD EPYC™ 7001 Processors
• AMD EPYC™ 7002 Processors
• Race condition

Code injection in 3rd Gen AMD EPYC™ Processors and others

• 3rd Gen AMD EPYC™ Processors
• 1st Gen AMD EPYC™ Processors
• Code injection

Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.

• 2nd Gen AMD EPYC™ Processors
• 3rd Gen AMD EPYC™ Processors

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

• AMD Ryzen™ 3000 series Desktop Processors “Matisse"
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

• AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
• 1st Gen AMD EPYC™ Processors

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…

• AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
• AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

• AMD Ryzen™ 3000 series Desktop Processors “Matisse"
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.

• 2nd Gen AMD EPYC™
• 3rd Gen AMD EPYC™