Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26360 State: PUBLISHED Published: 2022-11-09T20:44:26.034Z Last Updated: 2025-05-01T14:12:12.910Z Vendors: AMD Products: AMD Radeon RX 6000 Series & PRO W6000 Series Problem Types: TBD Description: An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
CVE ID: CVE-2021-26361 State: PUBLISHED Published: 2022-05-12T17:46:01.990877Z Last Updated: 2024-09-17T01:06:56.408Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26362 State: PUBLISHED Published: 2022-05-12T17:43:15.598731Z Last Updated: 2024-09-16T19:41:16.010Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26363 State: PUBLISHED Published: 2022-05-12T18:39:33.159439Z Last Updated: 2024-09-17T02:21:07.904Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26364 State: PUBLISHED Published: 2022-05-11T16:25:26.746976Z Last Updated: 2024-09-16T20:42:13.106Z Vendors: AMD Products: EPYC™ Processors Problem Types: tbd Description: Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26365 State: PUBLISHED Published: 2023-05-09T18:58:57.236Z Last Updated: 2025-01-28T15:47:24.862Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon
, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, Ryzen™ 6000 Series Mobile Processors "Rembrandt" Description: Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-26366 State: PUBLISHED Published: 2022-05-12T17:09:29.825927Z Last Updated: 2024-09-17T01:51:13.541Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26367 State: PUBLISHED Published: 2024-08-13T16:50:05.825Z Last Updated: 2024-12-04T16:25:09.987Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with
Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD Radeon™ RX 6000 Series Graphics Cards, AMD Radeon™ PRO W6000 Series Graphics Cards, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors Description: A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability. Additio
cker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE ID: CVE-2021-26368 State: PUBLISHED Published: 2022-05-12T18:22:27.719737Z Last Updated: 2024-09-16T22:09:04.185Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26369 State: PUBLISHED Published: 2022-05-12T17:07:32.274198Z Last Updated: 2024-09-16T19:51:13.979Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26370 State: PUBLISHED Published: 2022-05-10T18:25:17.618373Z Last Updated: 2024-09-16T22:20:14.838Z Vendors: AMD Products: 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26371 State: PUBLISHED Published: 2023-05-09T18:59:16.122Z Last Updated: 2025-01-28T15:46:02.389Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mo
rocessors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/pr
ferences: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-26372 State: PUBLISHED Published: 2022-05-11T16:18:58.798210Z Last Updated: 2024-09-16T19:15:19.878Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26373 State: PUBLISHED Published: 2022-05-11T16:27:13.373606Z Last Updated: 2024-09-16T16:32:39.034Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26374 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-26375 State: PUBLISHED Published: 2022-05-11T16:20:03.207552Z Last Updated: 2024-09-17T03:43:15.285Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26376 State: PUBLISHED Published: 2022-05-11T16:28:09.769017Z Last Updated: 2024-09-16T17:58:27.535Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26377 State: PUBLISHED Published: 2025-09-06T15:18:56.502Z Last Updated: 2025-09-08T13:47:10.991Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: AMD Products: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Gra
h Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors, AMD Radeon™ RX 5000 Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products,
Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Radeon™ Instinct™ MI25 Graphics Products, AMD Radeon™ PRO V520 Graphics Products, AMD Radeon™ PRO V620 Graphics Products Problem Types: CWE-190 Description: Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/e
hment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2021-26378 State: PUBLISHED Published: 2022-05-11T16:23:26.758045Z Last Updated: 2024-09-16T20:22:35.208Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26379 State: PUBLISHED Published: 2023-05-09T18:36:18.303Z Last Updated: 2025-01-28T16:02:38.949Z Vendors: AMD Products: 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-26382 State: PUBLISHED Published: 2022-07-14T19:28:30.676749Z Last Updated: 2024-09-16T22:29:40.793Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26383 State: PUBLISHED Published: 2025-09-05T23:21:25.947Z Last Updated: 2025-09-08T13:49:58.856Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ Embedded V2000 Series Processors, AMD Radeon™ RX 5000 Series Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Ra
Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Instinct™ MI210, AMD Instinct™ MI250, AMD Radeon™ PRO V520 Graphics Products, AMD Radeon™ PRO V620 Graphics Products Problem Types: CWE-787 Description: Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to out of bounds memory access, potentially resulting in loss of integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-secur
ability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2021-26384 State: PUBLISHED Published: 2022-07-14T19:28:56.918810Z Last Updated: 2024-09-16T23:15:36.383Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26385 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-26386 State: PUBLISHED Published: 2022-05-12T18:28:38.025992Z Last Updated: 2024-09-16T17:53:15.058Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26387 State: PUBLISHED Published: 2024-08-13T16:50:22.151Z Last Updated: 2024-10-30T17:59:30.394Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: AMD Products: AMD EPYC™ 7001 Series Processors, AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Se
with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors
essors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD EPYC™ Embedded 3000 Series Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9003 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Description: Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing k
ors Description: Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
CVE ID: CVE-2021-26388 State: PUBLISHED Published: 2022-05-11T16:29:06.174576Z Last Updated: 2024-09-16T23:01:19.603Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26390 State: PUBLISHED Published: 2022-05-10T18:24:25.459441Z Last Updated: 2024-09-16T23:11:12.188Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26391 State: PUBLISHED Published: 2022-11-09T20:44:25.253Z Last Updated: 2025-05-01T14:19:25.590Z Vendors: AMD Products: AMD Radeon RX 5000 Series & PRO W5000 Series, AMD Radeon RX 6000 Series & PRO W6000 Series Problem Types: TBD Description: Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
CVE ID: CVE-2021-26392 State: PUBLISHED Published: 2022-11-09T20:44:26.258839Z Last Updated: 2024-09-16T20:51:46.791Z Vendors: AMD Products: AMD Radeon RX 5000 Series & PRO W5000 Series, AMD Radeon RX 6000 Series & PRO W6000 Series, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000, AMD Ryzen™Embedded V3000 Description: Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd