Veille CVE

Recherche « AMD Ryzen™ Embedded 9000 Series Processors »

6 CVE

  1. CVE-2024-36343 4.6 Moyenne

    AMD EPYC™ 4004 · AMD EPYC™ 4005 · AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

    Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memory Segment (TSEG) memory region, potentially resulting in loss of confidentiality or integrity.

  2. CVE-2022-23826 1.8 Faible

    AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics · AMD Ryzen™ Embedded R1000 Series Processors

    A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

  3. CVE-2021-26380 1.8 Faible

    AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics · AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors · AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

    A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

  4. CVE-2026-0438 5.4 Moyenne

    AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics · AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics · AMD Ryzen™ 7000 Series Desktop Processors · AMD Ryzen™ 9000HX Series Processors

    A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

  5. CVE-2024-36345 4.6 Moyenne

    AMD EPYC™ 4004 · AMD EPYC™ 4005 · AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

    Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confidentiality.

  6. CVE-2024-36315 5.7 Moyenne

    AMD EPYC™ Series 9004 Processors · AMD EPYC™Series 4004 Processors · AMD EPYC™ 8004 Series Processors · AMD Instinct™ MI300A Series Processors

    Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.