Advisories · Technology
AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS.
Every CVE that names AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
- CVSS 8.8 High
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 9.8 CriticalCritical · CVSS 9+
Resource allocation without limits in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT and others
- 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
- AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 7.5 High
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a p…
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
- CVSS 7.5 High
Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” and others
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
- CVSS 7.5 High
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resul…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 5.5 Medium
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- CVSS 7.4 High
Time-of-check time-of-use race condition in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 and others
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
- Race condition
- CVSS 5.5 Medium
Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- Memory corruption