# AMD EPYC™ Processors. Every CVE that names AMD EPYC™ Processors among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.](https://agentprime.io/advisories/CVE-2021-26388.md) `CVE-2021-26388` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.](https://agentprime.io/advisories/CVE-2021-26376.md) `CVE-2021-26376` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.](https://agentprime.io/advisories/CVE-2021-26373.md) `CVE-2021-26373` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential lo…](https://agentprime.io/advisories/CVE-2021-26348.md) `CVE-2021-26348` · CVE record: AMD EPYC™ Processors · No CVSS score · Not analysed yet · Published 11 May 2022 - [Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potentia…](https://agentprime.io/advisories/CVE-2021-26364.md) `CVE-2021-26364` · CVE record: AMD EPYC™ Processors · No CVSS score · Not analysed yet · Published 11 May 2022 - [Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).](https://agentprime.io/advisories/CVE-2021-26349.md) `CVE-2021-26349` · CVE record: AMD EPYC™ Processors · No CVSS score · Not analysed yet · Published 11 May 2022 - [Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.](https://agentprime.io/advisories/CVE-2021-26378.md) `CVE-2021-26378` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB).](https://agentprime.io/advisories/CVE-2021-26342.md) `CVE-2021-26342` · CVE record: AMD EPYC™ Processors · No CVSS score · Not analysed yet · Published 11 May 2022 - [Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.](https://agentprime.io/advisories/CVE-2021-26375.md) `CVE-2021-26375` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.](https://agentprime.io/advisories/CVE-2021-26372.md) `CVE-2021-26372` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service.](https://agentprime.io/advisories/CVE-2021-26339.md) `CVE-2021-26339` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 11 May 2022 - [A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.](https://agentprime.io/advisories/CVE-2021-26350.md) `CVE-2021-26350` · CVE record: AMD EPYC™ Processors · No CVSS score · Not analysed yet · Published 11 May 2022 - [Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential lo…](https://agentprime.io/advisories/CVE-2021-26312.md) `CVE-2021-26312` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-665 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .