Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26320 State: PUBLISHED Published: 2021-11-16T18:05:10.770439Z Last Updated: 2024-09-16T18:34:19.728Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-295 Description: Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26321 State: PUBLISHED Published: 2021-11-16T18:07:26.527350Z Last Updated: 2024-09-16T18:56:13.855Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26322 State: PUBLISHED Published: 2021-11-16T17:58:40.230958Z Last Updated: 2024-09-17T00:56:29.964Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-320 Description: Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26323 State: PUBLISHED Published: 2021-11-16T18:14:43.401480Z Last Updated: 2024-09-16T23:45:40.552Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26324 State: PUBLISHED Published: 2022-05-10T18:27:30.491069Z Last Updated: 2024-09-16T17:54:12.083Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: tbd Description: A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26325 State: PUBLISHED Published: 2021-11-16T18:23:15.960316Z Last Updated: 2024-09-16T16:28:08.526Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26326 State: PUBLISHED Published: 2021-11-16T17:52:14.020889Z Last Updated: 2024-09-16T17:53:16.999Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: CWE-665 Description: Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26327 State: PUBLISHED Published: 2021-11-16T18:18:25.899504Z Last Updated: 2024-09-17T02:42:07.509Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26328 State: PUBLISHED Published: 2023-01-10T20:56:33.464Z Last Updated: 2025-04-09T15:11:57.590Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26329 State: PUBLISHED Published: 2021-11-16T17:57:01.031900Z Last Updated: 2024-09-16T22:24:45.920Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-130 Description: AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26330 State: PUBLISHED Published: 2021-11-16T18:19:29.476922Z Last Updated: 2024-09-16T18:12:54.960Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-122 Description: AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26331 State: PUBLISHED Published: 2021-11-16T18:09:35.653452Z Last Updated: 2024-09-16T21:03:02.452Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-20 Description: AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26332 State: PUBLISHED Published: 2022-05-10T18:26:52.115269Z Last Updated: 2024-09-16T17:23:38.341Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Problem Types: tbd Description: Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26333 State: PUBLISHED Published: 2021-09-21T10:49:49.457304Z Last Updated: 2024-09-16T22:08:38.057Z Vendors: AMD Products: PSP Driver Problem Types: CWE-200 Description: An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2021/Sep/24 - http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.h
losure/2021/Sep/24 - http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009
CVE ID: CVE-2021-26334 State: PUBLISHED Published: 2021-12-01T15:43:24.387290Z Last Updated: 2024-09-17T00:40:38.608Z Vendors: AMD Products: μProf Tool Problem Types: CWE-284 Description: The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016
CVE ID: CVE-2021-26335 State: PUBLISHED Published: 2021-11-16T18:08:39.387145Z Last Updated: 2024-09-16T18:24:42.318Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26336 State: PUBLISHED Published: 2021-11-16T18:04:08.054768Z Last Updated: 2024-09-16T17:33:06.189Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26337 State: PUBLISHED Published: 2021-11-16T18:24:01.483891Z Last Updated: 2024-09-17T03:49:09.083Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26338 State: PUBLISHED Published: 2021-11-16T17:53:50.233501Z Last Updated: 2024-09-17T01:56:07.563Z Vendors: AMD Products: 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™ Problem Types: CWE-284 Description: Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26339 State: PUBLISHED Published: 2022-05-11T16:18:02.079030Z Last Updated: 2024-09-17T01:56:55.986Z Vendors: AMD Products: EPYC™ Processors, Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/
ps://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26340 State: PUBLISHED Published: 2021-12-10T21:55:10.021622Z Last Updated: 2024-09-16T16:29:03.775Z Vendors: AMD Products: AMD EPYC™ Problem Types: NA Description: A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM). Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1023
CVE ID: CVE-2021-26341 State: PUBLISHED Published: 2022-03-11T17:54:35.055874Z Last Updated: 2024-09-16T20:16:42.726Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1026 - http://www.openwall.com/lists/oss-security/2022/03/18/2
CVE ID: CVE-2021-26342 State: PUBLISHED Published: 2022-05-11T16:21:04.403325Z Last Updated: 2024-09-16T16:32:42.078Z Vendors: AMD Products: EPYC™ Processors Problem Types: tbd Description: In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corpo
ted by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26343 State: PUBLISHED Published: 2023-01-10T20:56:34.870Z Last Updated: 2025-04-09T13:25:42.403Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26344 State: PUBLISHED Published: 2024-08-13T16:49:52.889Z Last Updated: 2025-03-18T15:35:45.232Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD EPYC™ 7001 Series Processors, AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™
™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD EPYC™ Embedded 7002 Series Processors, AMD EP
on™ Graphics, AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 3000 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Description: An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially
n attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially modify the APCB block resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE ID: CVE-2021-26345 State: PUBLISHED Published: 2023-11-14T18:53:20.979Z Last Updated: 2024-08-03T20:26:24.909Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: AMD Products: 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003 Description: Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.co
ram Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE ID: CVE-2021-26346 State: PUBLISHED Published: 2023-01-10T19:50:24.146Z Last Updated: 2025-04-09T15:14:19.086Z Vendors: AMD Products: Ryzen 5000 Series Problem Types: n/a Description: Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
CVE ID: CVE-2021-26347 State: PUBLISHED Published: 2022-05-11T16:22:09.774768Z Last Updated: 2024-08-03T20:26:25.052Z Vendors: AMD Products: Ryzen 5000 Series Problem Types: n/a Description: Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
CVE ID: CVE-2021-26348 State: PUBLISHED Published: 2022-05-11T16:26:16.451702Z Last Updated: 2024-09-16T16:27:57.232Z Vendors: AMD Products: EPYC™ Processors Problem Types: tbd Description: Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26349 State: PUBLISHED Published: 2022-05-11T16:24:22.957466Z Last Updated: 2024-09-17T01:05:40.403Z Vendors: AMD Products: EPYC™ Processors Problem Types: tbd Description: Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA). Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26350 State: PUBLISHED Published: 2022-05-11T16:16:40.882207Z Last Updated: 2024-09-16T21:07:55.195Z Vendors: AMD Products: EPYC™ Processors Problem Types: tbd Description: A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
CVE ID: CVE-2021-26351 State: PUBLISHED Published: 2022-05-12T17:18:51.729866Z Last Updated: 2024-09-16T22:41:24.903Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26352 State: PUBLISHED Published: 2022-05-10T18:26:07.477969Z Last Updated: 2024-09-16T16:58:20.622Z Vendors: AMD Products: Ryzen™ Series, Athlon™ Series Problem Types: tbd Description: Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE ID: CVE-2021-26353 State: PUBLISHED Published: 2022-05-10T18:33:42.470384Z Last Updated: 2024-08-03T20:26:24.535Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26354 State: PUBLISHED Published: 2023-05-09T18:58:37.664Z Last Updated: 2025-01-28T15:50:35.057Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with
ocessors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: Insufficient bounds checkin
Graphics “Cezanne”, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-26355 State: PUBLISHED Published: 2023-01-10T20:56:37.810Z Last Updated: 2025-04-09T14:56:35.656Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26356 State: PUBLISHED Published: 2023-05-09T18:58:48.108Z Last Updated: 2025-01-28T15:48:38.470Z Vendors: AMD Products: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure. Addi
h the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-26357 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-26358 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.