Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-20515 State: PUBLISHED Published: 2025-02-11T21:16:29.016Z Last Updated: 2025-02-12T15:35:01.957Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: AMD Products: AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ry
Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD R
deon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V3000 Problem Types: CWE-1284 Description: Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en
ment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html
CVE ID: CVE-2023-20516 State: PUBLISHED Published: 2025-09-06T16:13:36.336Z Last Updated: 2025-09-08T13:42:33.903Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: AMD Products: AMD Instinct™ MI250, AMD Instinct™ MI210, AMD Radeon™ Instinct™ MI25 Graphics Products, AMD Radeon™ PRO V520 Graphics Products, AMD Radeon™ PRO V620 Graphics Products Problem Types: CWE-274 Description: Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidentiality or integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/reso
nfidentiality or integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
CVE ID: CVE-2023-20518 State: PUBLISHED Published: 2024-08-13T16:52:55.976Z Last Updated: 2024-11-05T17:10:30.170Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: AMD Products: AMD EPYC™ 9004 Series Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5
eadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded R
Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Description: Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality. Additional Analyst Notes: - CISA ADP Vulnric
filtration vulnerability, potentially resulting in loss of confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
CVE ID: CVE-2023-20519 State: PUBLISHED Published: 2023-11-14T18:53:36.329Z Last Updated: 2024-08-30T18:03:55.829Z Vendors: AMD, AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors Description: A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
CVE ID: CVE-2023-20520 State: PUBLISHED Published: 2023-05-09T18:36:29.141Z Last Updated: 2025-01-28T15:54:22.503Z Vendors: AMD Products: 1st Gen AMD EPYC™ , 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2023-20521 State: PUBLISHED Published: 2023-11-14T18:52:31.662Z Last Updated: 2024-08-02T09:05:36.873Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L) Vendors: AMD Products: Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4, Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002,
rocessors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded V1000 Description: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.
ecurity/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2023-20522 State: PUBLISHED Published: 2023-01-10T20:56:58.039Z Last Updated: 2025-04-07T15:48:03.371Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20523 State: PUBLISHED Published: 2023-01-10T20:56:59.383Z Last Updated: 2025-04-07T15:47:41.028Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20524 State: PUBLISHED Published: 2023-05-09T18:36:29.876Z Last Updated: 2025-01-28T15:51:34.268Z Vendors: AMD Products: 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2023-20525 State: PUBLISHED Published: 2023-01-10T20:57:00.713Z Last Updated: 2025-04-07T15:47:21.531Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20526 State: PUBLISHED Published: 2023-11-14T18:52:41.992Z Last Updated: 2024-08-02T09:05:36.942Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: AMD Products: AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003 Description: Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: References: -
emory potentially leading to a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2023-20527 State: PUBLISHED Published: 2023-01-10T20:57:02.034Z Last Updated: 2025-04-07T15:47:00.818Z Vendors: AMD, AMD Products: 1st Gen EPYC, 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20528 State: PUBLISHED Published: 2023-01-10T20:57:03.392Z Last Updated: 2025-04-07T18:35:25.086Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20529 State: PUBLISHED Published: 2023-01-10T20:57:04.799Z Last Updated: 2025-04-07T18:34:54.131Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20530 State: PUBLISHED Published: 2023-01-10T20:57:06.132Z Last Updated: 2025-04-07T18:34:30.136Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20531 State: PUBLISHED Published: 2023-01-10T20:57:07.471Z Last Updated: 2025-04-07T18:33:55.600Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20532 State: PUBLISHED Published: 2023-01-10T20:57:08.762Z Last Updated: 2025-04-07T18:33:14.880Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2023-20533 State: PUBLISHED Published: 2023-11-14T18:52:52.106Z Last Updated: 2024-08-02T09:05:36.915Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:H) Vendors: AMD Products: Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD Ryzen™ Embedded 5000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003 Desc
Embedded 7002, AMD EPYC™ Embedded 7003, AMD Ryzen™ Embedded 5000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003 Description: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2023-20555 State: PUBLISHED Published: 2023-08-08T17:07:24.476Z Last Updated: 2024-10-24T14:36:35.845Z Vendors: AMD Products: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” AM4, Ryzen™ 7000 Series Processors “Raphael”, Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso”, Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” FP5, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 3000 Series Mobile Processors with Rad
P5, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, Ryzen™ 6000 Series Mobile Processors "Rembrandt", Ryzen™ 7030 Series Mobile Processors “Barcelo” , Ryzen™ 7020 Series Mobile Processors “Mendocino” Description: Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially lead
low an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4003
CVE ID: CVE-2023-20556 State: PUBLISHED Published: 2023-08-08T17:14:24.974Z Last Updated: 2024-10-10T16:01:41.871Z Vendors: AMD, AMD Products: μProf Description: Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003
CVE ID: CVE-2023-20558 State: PUBLISHED Published: 2023-03-23T18:50:11.488Z Last Updated: 2025-02-20T19:23:58.341Z Vendors: AMD, AMD Products: Ryzen™ 2000 Series , Ryzen™ 3000 Series, Ryzen™ 4000 Series, Ryzen™ 5000 Series, 2nd Gen AMD Ryzen™ Threadripper™ Processor, 3rd Gen AMD Ryzen™ Threadripper™ Processors, Ryzen™ Threadripper™ PRO Processor Problem Types: n/a Description: Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd
Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html
CVE ID: CVE-2023-20559 State: PUBLISHED Published: 2023-03-23T18:49:41.533Z Last Updated: 2025-02-25T16:43:49.632Z Vendors: AMD, AMD Products: Ryzen™ 2000 Series , Ryzen™ 3000 Series, Ryzen™ 4000 Series, Ryzen™ 5000 Series, 2nd Gen AMD Ryzen™ Threadripper™ Processor, 3rd Gen AMD Ryzen™ Threadripper™ Processors, Ryzen™ Threadripper™ PRO Processor Problem Types: n/a Description: Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/a
E Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html
CVE ID: CVE-2023-20560 State: PUBLISHED Published: 2023-08-15T21:08:47.904Z Last Updated: 2024-10-08T19:29:52.840Z Vendors: AMD Products: Ryzen™ Master Description: Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004
CVE ID: CVE-2023-20561 State: PUBLISHED Published: 2023-08-08T17:14:53.405Z Last Updated: 2024-10-10T16:00:57.411Z Vendors: AMD, AMD Products: μProf Description: Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003
CVE ID: CVE-2023-20562 State: PUBLISHED Published: 2023-08-08T17:13:50.810Z Last Updated: 2024-10-10T19:09:22.207Z Vendors: AMD, AMD Products: μProf Description: Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003
CVE ID: CVE-2023-20563 State: PUBLISHED Published: 2023-11-14T18:54:41.308Z Last Updated: 2024-10-22T13:44:05.548Z Vendors: AMD Products: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, Ryzen™ 7000 Series Desktop Processors “Raphael” XD3, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8, AM
ith Radeon™ Graphics “Barcelo-R”, Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded V3000 Description: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2023-20564 State: PUBLISHED Published: 2023-08-15T21:07:49.838Z Last Updated: 2024-10-08T19:31:56.839Z Vendors: AMD Products: Ryzen™ Master Description: Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004
CVE ID: CVE-2023-20565 State: PUBLISHED Published: 2023-11-14T18:54:51.738Z Last Updated: 2024-08-02T09:05:45.856Z Vendors: AMD Products: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, Ryzen™ 7000 Series Desktop Processors “Raphael” XD3, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8, AMD Ryzen™ Embedded V3000 Description: Insufficient protections in Syste
with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8, AMD Ryzen™ Embedded V3000 Description: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001