AMD AMD Ryzen™ Embedded V2000

• CVE-2023-20577 High 7.4 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution. 0.2%
• CVE-2024-21971 Medium 5.5 Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading t 0.1%
• CVE-2023-31345 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31343 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31342 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31331 Low 3.0 Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of i 0.2%
• CVE-2023-20515 Medium 5.7 Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability. 0.2%
• CVE-2023-20507 Low 2.3 An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity. 0.2%
• CVE-2024-0179 High 8.2 SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution. 0.2%
• CVE-2024-21925 High 8.2 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution. 0.2%
• CVE-2023-31315 High 7.5 Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code ex 0.6%
• CVE-2023-20579 Low 3.4 Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability. 0.2%
• CVE-2021-46757 High 7.8 Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escal 0.2%
• CVE-2022-23821 Unrated Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. 1.0%
• CVE-2023-20597 Unrated Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 0.2%
• CVE-2021-46754 Unrated Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU 0.6%
• CVE-2021-26392 Unrated Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a 0.3%
• CVE-2021-26393 Unrated Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially pois 0.3%