AMD AMD Ryzen™ Embedded V2000 Series Processors
35 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-46747 | | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to m | HIGH 7.1 | 0.1 % | ||
| CVE-2025-54518 | | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instruction | HIGH 7.3 | 0.3 % | ||
| CVE-2023-31316 | | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could | HIGH 7.1 | 0.1 % | ||
| CVE-2021-26380 | | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range re | LOW 1.8 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2025-48521 | | Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condit | MEDIUM 6.9 | 0.1 % | ||
| CVE-2025-48512 | | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attack | HIGH 7.0 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2025-48515 | | Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overw | MEDIUM 5.4 | 0.1 % | ||
| CVE-2021-26410 | | Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memo | LOW 1.8 | 0.2 % | ||
| CVE-2021-26381 | | Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a lar | HIGH 7.1 | 0.2 % | ||
| CVE-2025-29949 | | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2025-0011 | | Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address | LOW 3.3 | 0.2 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2024-36352 | | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to a | HIGH 8.4 | 0.1 % | ||
| CVE-2024-36342 | | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execu | HIGH 8.8 | 0.2 % | ||
| CVE-2024-21970 | | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti | MEDIUM 4.4 | 0.1 % | ||
| CVE-2024-21947 | | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re | HIGH 7.5 | 0.1 % | ||
| CVE-2023-31326 | | Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) drive | LOW 2.8 | 0.1 % | ||
| CVE-2021-46750 | | Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed message | LOW 3.0 | 0.2 % | ||
| CVE-2021-26377 | | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig | MEDIUM 4.1 | 0.2 % | ||
| CVE-2021-26383 | | Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a com | HIGH 7.9 | 0.2 % | ||
| CVE-2024-36348 | | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI | LOW 3.8 | 0.3 % | ||
| CVE-2024-36349 | | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote | LOW 3.8 | 0.2 % | ||
| CVE-2023-20518 | | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell | LOW 1.9 | 0.1 % | ||
| CVE-2021-46772 | | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the struc | LOW 3.9 | 0.2 % | ||
| CVE-2021-46746 | | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26387 | | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell t | LOW 3.9 | 0.1 % | ||
| CVE-2021-26367 | | A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address ran | MEDIUM 6.0 | 0.2 % | ||
| CVE-2021-26344 | | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to mod | HIGH 8.2 | 0.2 % |