Amd: Security Vulnerabilities
Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.
CVSS Score
6.7
EPSS Score
0.003
Published
2021-12-10
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
CVSS Score
9.9
EPSS Score
0.012
Published
2021-12-01
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-11-16
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2021-11-16
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2021-11-16
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-11-16
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-11-16
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2021-11-16
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.
CVSS Score
7.1
EPSS Score
0.002
Published
2021-11-16
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
CVSS Score
7.0
EPSS Score
0.002
Published
2021-11-16