agentprime: amd-epyctm-embedded-7003Every new CVE for amd-epyctm-embedded-7003.https://agentprime.io/CVE-2023-31345: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.https://agentprime.io/advisories/CVE-2023-31345/https://agentprime.io/advisories/CVE-2023-31345/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 23:49:05 GMTCVECVE-2023-31356: Incomplete cleanup in AMD EPYC™ 7003 Processors and othershttps://agentprime.io/advisories/CVE-2023-31356/https://agentprime.io/advisories/CVE-2023-31356/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Aug 2024 16:54:23 GMTCVECVE-2023-20578: Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors and othershttps://agentprime.io/advisories/CVE-2023-20578/https://agentprime.io/advisories/CVE-2023-20578/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Aug 2024 16:52:58 GMTCVECVE-2023-31315: Code injection in 3rd Gen AMD EPYC™ Processors and othershttps://agentprime.io/advisories/CVE-2023-31315/https://agentprime.io/advisories/CVE-2023-31315/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Aug 2024 17:08:24 GMTCVECVE-2024-21980: Buffer overflow in 3rd Gen AMD EPYC™ Processors and othershttps://agentprime.io/advisories/CVE-2024-21980/https://agentprime.io/advisories/CVE-2024-21980/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 16:06:36 GMTCVECVE-2024-21978: Improper input validation in 3rd Gen AMD EPYC™ Processors and othershttps://agentprime.io/advisories/CVE-2024-21978/https://agentprime.io/advisories/CVE-2024-21978/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 16:05:34 GMTCVECVE-2023-31355: Buffer overflow in 3rd Gen AMD EPYC™ Processors and othershttps://agentprime.io/advisories/CVE-2023-31355/https://agentprime.io/advisories/CVE-2023-31355/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 16:04:24 GMTCVECVE-2022-23829: Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and othershttps://agentprime.io/advisories/CVE-2022-23829/https://agentprime.io/advisories/CVE-2022-23829/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 19:01:24 GMTCVECVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.https://agentprime.io/advisories/CVE-2023-20566/https://agentprime.io/advisories/CVE-2023-20566/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:54:00 GMTCVECVE-2022-23830: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.https://agentprime.io/advisories/CVE-2022-23830/https://agentprime.io/advisories/CVE-2022-23830/CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:53:28 GMTCVECVE-2021-26345: Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.https://agentprime.io/advisories/CVE-2021-26345/https://agentprime.io/advisories/CVE-2021-26345/CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:53:20 GMTCVECVE-2023-20533: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.https://agentprime.io/advisories/CVE-2023-20533/https://agentprime.io/advisories/CVE-2023-20533/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:52:52 GMTCVECVE-2023-20526: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.https://agentprime.io/advisories/CVE-2023-20526/https://agentprime.io/advisories/CVE-2023-20526/CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:52:41 GMTCVECVE-2023-20521: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…https://agentprime.io/advisories/CVE-2023-20521/https://agentprime.io/advisories/CVE-2023-20521/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:52:31 GMTCVECVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.https://agentprime.io/advisories/CVE-2022-23820/https://agentprime.io/advisories/CVE-2022-23820/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:52:21 GMTCVECVE-2021-46774: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.https://agentprime.io/advisories/CVE-2021-46774/https://agentprime.io/advisories/CVE-2021-46774/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:52:11 GMTCVECVE-2023-20597: Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and othershttps://agentprime.io/advisories/CVE-2023-20597/https://agentprime.io/advisories/CVE-2023-20597/Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Sep 2023 17:32:18 GMTCVECVE-2021-46762: Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.https://agentprime.io/advisories/CVE-2021-46762/https://agentprime.io/advisories/CVE-2021-46762/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:23 GMTCVE