Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31315 State: PUBLISHED Published: 2024-08-09T17:08:24.237Z Last Updated: 2024-09-12T12:56:32.250Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors
d V2000, AMD Ryzen™ Embedded V3000, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD R
00 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics Description: Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially lea
could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html
CVE ID: CVE-2023-31320 State: PUBLISHED Published: 2023-11-14T18:51:43.415Z Last Updated: 2024-08-02T14:53:30.757Z Vendors: AMD, AMD Products: Radeon™ RX 5000/6000/7000 Series Graphics Cards , Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards, Radeon™ RX Vega Series Graphics Cards, Radeon™ PRO WX Vega Series Graphics Cards Description: Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
CVE ID: CVE-2023-31322 State: PUBLISHED Published: 2025-09-06T16:32:40.105Z Last Updated: 2025-09-09T03:55:20.681Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: AMD Products: AMD Radeon™ RX 7000 Series Graphics Products, -AMD Radeon™ PRO W7000 Series Graphics Products Problem Types: CWE-843 Description: Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading to a read or write to shared memory resulting in loss of confidentiality, integrity, or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.a
fidentiality, integrity, or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
CVE ID: CVE-2023-31325 State: PUBLISHED Published: 2025-09-06T16:42:22.866Z Last Updated: 2025-09-09T03:55:21.526Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: AMD Products: AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products Problem Types: CWE-1189 Description: Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity. Additional Analyst Notes: - CISA ADP
served DRAM region potentially resulting in loss of confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
CVE ID: CVE-2023-31326 State: PUBLISHED Published: 2025-09-06T16:48:43.991Z Last Updated: 2025-09-08T20:04:43.607Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: AMD Products: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded V2000 Series Pro
ors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Instinct™ MI210, AMD Instinct™ MI250, AMD Radeon™ PRO V710 Graphics Products Problem Types: CWE-457 Description: Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2023-31330 State: PUBLISHED Published: 2025-09-06T16:57:08.320Z Last Updated: 2025-09-08T20:04:07.101Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: AMD Products: AMD Ryzen™ Threadripper™ 3000 Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series M
8000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 7000 Processors, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desk
Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors Problem Types: CWE-125 Description: An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2023-31331 State: PUBLISHED Published: 2025-02-11T21:44:03.782Z Last Updated: 2025-02-12T15:36:21.957Z Severity: LOW (CVSS 3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: AMD Products: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors
cessor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000 Problem Types: CWE-1284 Description: Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-sec
ilability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
CVE ID: CVE-2023-31339 State: PUBLISHED Published: 2024-08-13T16:56:22.024Z Last Updated: 2024-08-15T15:18:21.699Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H) Vendors: AMD Products: Zynq™ UltraScale+™ MPSoC/RFSoC Problem Types: CWE-20 Description: Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002
CVE ID: CVE-2023-31341 State: PUBLISHED Published: 2024-08-13T16:57:07.052Z Last Updated: 2024-08-13T17:51:06.170Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: μProf Tool Problem Types: CWE-284 Description: Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE ID: CVE-2023-31342 State: PUBLISHED Published: 2025-02-11T22:24:02.153Z Last Updated: 2025-09-23T21:23:17.849Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors, AMD Instinct™ MI300A, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 5000WX-
ssor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7003, AMD EPYC™
0 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9004, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000 Problem Types: CWE-1220 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html - ht
ct-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
CVE ID: CVE-2023-31343 State: PUBLISHED Published: 2025-02-11T22:35:04.110Z Last Updated: 2025-09-23T21:39:19.127Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors, AMD Instinct™ MI300A, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 5000WX-
CVE ID: CVE-2023-31345 State: PUBLISHED Published: 2025-02-11T23:49:05.388Z Last Updated: 2025-09-23T21:25:15.000Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors, AMD Instinct™ MI300A, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Process
Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9004, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded 7000,
Mobile Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9004, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000 Problem Types: CWE-1274 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
CVE ID: CVE-2023-31346 State: PUBLISHED Published: 2024-02-13T19:18:19.089Z Last Updated: 2025-03-20T20:27:50.012Z Vendors: AMD, AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors Description: Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007
CVE ID: CVE-2023-31347 State: PUBLISHED Published: 2024-02-13T19:18:51.045Z Last Updated: 2025-03-17T17:46:05.955Z Vendors: AMD, AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors Description: Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007
CVE ID: CVE-2023-31348 State: PUBLISHED Published: 2024-08-13T16:57:16.834Z Last Updated: 2024-08-14T14:23:03.371Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: μProf Tool Description: A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE ID: CVE-2023-31349 State: PUBLISHED Published: 2024-08-13T16:57:28.998Z Last Updated: 2024-08-13T18:02:44.526Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: μProf Tool Problem Types: CWE-276 Description: Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE ID: CVE-2023-31351 State: PUBLISHED Published: 2025-09-06T16:59:26.905Z Last Updated: 2025-09-08T20:03:47.167Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: AMD Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors Problem Types: CWE-119 Description: Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulle
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
CVE ID: CVE-2023-31352 State: PUBLISHED Published: 2025-02-11T22:44:28.001Z Last Updated: 2025-02-12T15:34:40.236Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: AMD Products: AMD EPYC™ 9004 Processors, AMD EPYC™ Embedded 9004 Problem Types: CWE-119 Description: A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
CVE ID: CVE-2023-31355 State: PUBLISHED Published: 2024-08-05T16:04:24.813Z Last Updated: 2024-08-06T14:58:40.899Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003 Problem Types: CWE-119 Description: Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html
CVE ID: CVE-2023-31356 State: PUBLISHED Published: 2024-08-13T16:54:23.979Z Last Updated: 2025-02-11T22:48:16.160Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: AMD Products: AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9004 Problem Types: CWE-459 Description: Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html - https://www.amd.com/en/resources/product
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
CVE ID: CVE-2023-31358 State: PUBLISHED Published: 2025-05-13T17:14:16.675Z Last Updated: 2025-05-16T03:55:36.159Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AIM-T Manageability API Problem Types: CWE-276 Description: A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE ID: CVE-2023-31359 State: PUBLISHED Published: 2025-05-13T17:15:44.658Z Last Updated: 2025-05-16T03:55:37.508Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AIM-T Manageability API Problem Types: CWE-276 Description: Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE ID: CVE-2023-31360 State: PUBLISHED Published: 2025-02-11T20:01:48.822Z Last Updated: 2025-02-12T15:36:12.374Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AIM-T(AMD Integrated Management Technology) software Problem Types: CWE-276 Description: Incorrect default permissions in the AMD Integrated Management Technology (AIM-T) Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9012.html
CVE ID: CVE-2023-31361 State: PUBLISHED Published: 2025-02-11T20:07:05.296Z Last Updated: 2025-02-12T15:35:54.982Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AIM-T (AMD Integrated Management Technology) software Problem Types: CWE-427 Description: A DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9012.html