AMD · 2nd Gen EPYC vulnerability disclosures
Explore 14 current published CVE records under this source identity, canonical score coverage, provider assessments and recent disclosures. Verify affected versions in the original source.
Current source coverage
- Published CVE records
- 14
- Canonical CVSS recorded
- 14
- No canonical CVSS score
- 0
- Listed in the retained CISA KEV catalog
- 0
- EPSS recorded
- 14
- NVD status recorded
- 14
Recent source disclosures
- CVE-2023-20532 — Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.
- CVE-2023-20531 — Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service.
- CVE-2023-20529 — Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.
- CVE-2023-20528 — Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.
- CVE-2023-20527 — Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.
- CVE-2023-20525 — Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.
- CVE-2023-20523 — TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.
- CVE-2023-20522 — Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.
- CVE-2022-23813 — The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment.
- CVE-2021-46779 — Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.
Source revision: a62ec541fa6cb865d02001298e955dbed589f294
Counts describe distinct currently published, source-present CVE records, grouping only case variations of publisher-supplied names; they do not establish organizational exposure.
Canonical labels retain an actual source spelling. Synonyms and aliases are not merged; versions and vendor attribution require source review.
Provider coverage describes currently retained assessments; it does not reconstruct historical risk. Check source freshness separately.