High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-08	CVE-2023-20555	Out-of-bounds Write vulnerability in AMD products Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. local low complexity amd CWE-787	7.8
2023-01-11	CVE-2021-26316	Improper Input Validation vulnerability in AMD products Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution. local low complexity amd CWE-20	7.8
2022-02-04	CVE-2020-12965	Injection vulnerability in AMD products When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage. network low complexity amd CWE-74	7.5