CVE-2023-4969

all versions

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory regio

6.5MEDIUM

CVE-2021-46758

< cezannepi-fp6_1.0.0.c

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in

6.1MEDIUM

CVE-2023-20597

all versions

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

5.5MEDIUM

CVE-2023-20594

all versions

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

4.4MEDIUM

CVE-2023-20589

all versions

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection a

6.8MEDIUM

CVE-2023-20569

< cezannepi-fp6_1.0.0.fa

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may re

4.7MEDIUM

CVE-2023-20555

< cezannepi-fp6_1.0.0.e

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit

7.8HIGH

CVE-2023-20593

all versions

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensiti

5.5MEDIUM

CVE-2021-26365

< cezannepi-fp6_1.0.0.8

Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of

8.2HIGH

CVE-2021-26354

< cezannepi-fp6_1.0.0.8

Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary

5.5MEDIUM

CVE-2022-27672

all versions

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an

4.7MEDIUM

CVE-2021-26346

all versions

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer ove

5.5MEDIUM

CVE-2021-26316

all versions

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer

7.8HIGH

CVE-2021-26393

all versions

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attac

5.5MEDIUM

CVE-2021-26392

all versions

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacke

7.8HIGH

CVE-2021-26391

all versions

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privil

7.8HIGH

CVE-2020-12931

all versions

Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges

7.8HIGH

CVE-2020-12930

all versions

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges pot

7.8HIGH

CVE-2021-46778

all versions

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen

5.6MEDIUM

CVE-2021-26388

< cezannepi-fp6_1.0.0._9a

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of b

5.5MEDIUM