CVE-2021-26367

< comboam4v2_pi_1.2.0.5

A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary a

5.7MEDIUM

CVE-2023-20579

< comboam4v2pi_1.2.0.c

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass pr

6.0MEDIUM

CVE-2023-4969

all versions

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory regio

6.5MEDIUM

CVE-2023-20589

all versions

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection a

6.8MEDIUM

CVE-2023-20593

all versions

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensiti

5.5MEDIUM

CVE-2023-20559

< renoirpi-fp6_1.0.0.7

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potential

8.8HIGH

CVE-2023-20558

< renoirpi-fp6_1.0.0.7

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially le

8.8HIGH

CVE-2022-27672

all versions

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an

4.7MEDIUM

CVE-2022-23824

all versions

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information

5.5MEDIUM

CVE-2021-46778

all versions

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen

5.6MEDIUM

CVE-2022-23825

all versions

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information

6.5MEDIUM

CVE-2022-29900

all versions

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitect

6.5MEDIUM

CVE-2022-23823

all versions

A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing a

6.5MEDIUM

CVE-2021-26339

< comboam4_v2_pi_1.2.0.6c

A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang

5.5MEDIUM

CVE-2021-26401

all versions

LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.

5.6MEDIUM

CVE-2021-26341

all versions

Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.

6.5MEDIUM