Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Description: Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in
t of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46750 State: PUBLISHED Published: 2025-09-06T16:03:55.584Z Last Updated: 2025-09-08T13:45:05.234Z Severity: LOW (CVSS 3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: AMD Products: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ Embed
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Radeon™ PRO V620 Graphics Products Problem Types: CWE-190 Description: Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR (Trusted Memor
alicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR (Trusted Memory Region) that was previously allocated by the ASP bootloader leading to a potential loss of integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2021-46753 State: PUBLISHED Published: 2023-05-09T19:00:04.895Z Last Updated: 2025-01-28T15:41:07.173Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon
, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, Ryzen™ 6000 Series Mobile Processors "Rembrandt" Description: Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bull
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46754 State: PUBLISHED Published: 2023-05-09T19:00:16.712Z Last Updated: 2024-08-04T05:17:42.313Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon
, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000 Description: Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.a
al loss of confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2021-46755 State: PUBLISHED Published: 2023-05-09T19:00:26.747Z Last Updated: 2025-01-28T15:39:32.696Z Vendors: AMD Products: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
obile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Description: Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46756 State: PUBLISHED Published: 2023-05-09T19:00:35.599Z Last Updated: 2025-01-28T15:38:19.211Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 S
ocessors “Castle Peak” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: Insufficient validation of inputs in SVC_MAP_US
2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-46757 State: PUBLISHED Published: 2024-02-13T19:23:57.918Z Last Updated: 2025-05-07T21:08:36.540Z Vendors: AMD Products: AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded V2000 Description: Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2021-46758 State: PUBLISHED Published: 2023-11-14T18:54:25.467Z Last Updated: 2024-08-04T05:17:42.665Z Vendors: AMD Products: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, Ryzen™ 7000 Series Desktop Processors “Raphael” XD3, Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Se
th Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” Description: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
CVE ID: CVE-2021-46759 State: PUBLISHED Published: 2023-05-09T19:00:53.047Z Last Updated: 2025-01-27T17:34:38.069Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon
, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Description: Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-S
ogram Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46760 State: PUBLISHED Published: 2023-05-09T19:01:05.377Z Last Updated: 2025-01-27T17:29:32.464Z Vendors: AMD Products: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS Description: A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentially lead to an attacker leaking sensitive information or achieving code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46761 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-46762 State: PUBLISHED Published: 2023-05-09T18:36:23.081Z Last Updated: 2025-01-28T16:00:40.217Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: AMD Products: 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003 Description: Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2021-46763 State: PUBLISHED Published: 2023-05-09T18:36:23.834Z Last Updated: 2025-01-28T16:00:03.817Z Vendors: AMD Products: 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to a loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-46764 State: PUBLISHED Published: 2023-05-09T18:36:24.562Z Last Updated: 2025-01-28T15:59:14.778Z Vendors: AMD Products: 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-46765 State: PUBLISHED Published: 2023-05-09T19:01:15.823Z Last Updated: 2025-01-27T17:27:51.011Z Vendors: AMD Products: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, Ryzen™ 6000 Series Mobile Processors "Rembrandt" Description: Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service. Additional Analyst Notes: - CVE Prog
-of-bounds memory reads within the ASP, potentially leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46766 State: PUBLISHED Published: 2023-11-14T18:51:58.036Z Last Updated: 2024-08-04T05:17:42.287Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: AMD Products: Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 9003 Description: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-securi
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2021-46767 State: PUBLISHED Published: 2023-01-10T20:56:50.057Z Last Updated: 2025-04-09T14:51:23.812Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-46768 State: PUBLISHED Published: 2023-01-10T20:56:51.443Z Last Updated: 2025-04-09T14:50:04.831Z Vendors: AMD, AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-46769 State: PUBLISHED Published: 2023-05-09T18:36:25.695Z Last Updated: 2025-01-28T15:57:52.765Z Vendors: AMD Products: 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-46771 State: PUBLISHED Published: 2022-05-10T18:30:03.257543Z Last Updated: 2024-09-17T04:09:13.761Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-46772 State: PUBLISHED Published: 2024-08-13T16:50:54.016Z Last Updated: 2024-11-05T21:18:50.631Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: AMD Products: AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Pro
™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD EPYC™ Embedded 7002 Series
rocessors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Description: Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory
er with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
CVE ID: CVE-2021-46773 State: PUBLISHED Published: 2023-05-09T19:01:27.589Z Last Updated: 2025-01-28T15:37:21.733Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile Processors with
ocessors “Chagall” WS, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Description: Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46774 State: PUBLISHED Published: 2023-11-14T18:52:11.012Z Last Updated: 2024-10-11T18:07:59.642Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L) Vendors: AMD Products: Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded
MD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD Ryzen™ Embedded 5000 Description: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001