CVE-2023-20579

< cezannepi-fp6_1.0.1.0

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass pr

6.0MEDIUM

CVE-2023-4969

all versions

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory regio

6.5MEDIUM

CVE-2023-20521

< picassopi-fp5_1.0.0.e

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verifi

3.3LOW

CVE-2022-23821

all versions

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary

9.8CRITICAL

CVE-2023-20597

all versions

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

5.5MEDIUM

CVE-2023-20594

all versions

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

4.4MEDIUM

CVE-2021-26371

< picassopi-fp5_1.0.0.d

A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memo

5.5MEDIUM

CVE-2021-26365

< picassopi-fp5_1.0.0.d

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of

8.2HIGH

CVE-2021-26354

< picassopi-fp5_1.0.0.d

Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary

5.5MEDIUM

CVE-2021-26346

all versions

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer ove

5.5MEDIUM

CVE-2021-26393

all versions

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attac

5.5MEDIUM

CVE-2021-26392

all versions

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacke

7.8HIGH

CVE-2020-12931

all versions

Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges

7.8HIGH

CVE-2020-12930

all versions

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges pot

7.8HIGH