AMD EPYC™ Embedded 7003.

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

• AMD EPYC™ 7003 Processors
• AMD EPYC™ 9004 Processors
• CWE-1274

Incomplete cleanup in AMD EPYC™ 7003 Processors and others

• AMD EPYC™ 7003 Processors
• AMD EPYC™ 9004 Processors
• CWE-459

Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors and others

• AMD EPYC™ 7001 Processors
• AMD EPYC™ 7002 Processors
• Race condition

Code injection in 3rd Gen AMD EPYC™ Processors and others

• 3rd Gen AMD EPYC™ Processors
• 1st Gen AMD EPYC™ Processors
• Code injection

Buffer overflow in 3rd Gen AMD EPYC™ Processors and others

• 3rd Gen AMD EPYC™ Processors
• 4th Gen AMD EPYC™ Processors
• Memory corruption

Improper input validation in 3rd Gen AMD EPYC™ Processors and others

• 3rd Gen AMD EPYC™ Processors
• 4th Gen AMD EPYC™ Processors
• CWE-20

Buffer overflow in 3rd Gen AMD EPYC™ Processors and others

• 3rd Gen AMD EPYC™ Processors
• 4th Gen AMD EPYC™ Processors
• Memory corruption

Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and others

• AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series
• AMD Ryzen™ 6000 Series Mobile Processors and Workstations
• Broken access control

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.

• 3rd Gen AMD EPYC™ Processors
• 4th Gen AMD EPYC™ Processors

SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.

• 3rd Gen AMD EPYC™ Processors
• 4th Gen AMD EPY™ Processors

Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.

• 2nd Gen AMD EPYC™ Processors
• 3rd Gen AMD EPYC™ Processors

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

• AMD Ryzen™ 3000 series Desktop Processors “Matisse"
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

• AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
• 1st Gen AMD EPYC™ Processors

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…

• AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
• AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.

• AMD Ryzen™ 3000 series Desktop Processors “Matisse"
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

• AMD Ryzen™ 3000 series Desktop Processors “Matisse"
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and others

• AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
• Memory corruption

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.

• 2nd Gen AMD EPYC™
• 3rd Gen AMD EPYC™