High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-11	CVE-2021-26398	Out-of-bounds Write vulnerability in AMD products Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution. local low complexity amd CWE-787	7.8
2023-01-11	CVE-2021-26402	Out-of-bounds Write vulnerability in AMD products Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability. local low complexity amd CWE-787	7.1
2023-01-11	CVE-2023-20529	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in AMD products Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service. network low complexity amd CWE-119	7.5
2023-01-11	CVE-2023-20530	Improper Input Validation vulnerability in AMD products Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service. network low complexity amd CWE-20	7.5
2023-01-11	CVE-2023-20531	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in AMD products Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service. network low complexity amd CWE-119	7.5
2022-05-10	CVE-2021-26324	Unspecified vulnerability in AMD products A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. local low complexity amd	7.8
2022-05-10	CVE-2021-26332	Unspecified vulnerability in AMD products Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability. local low complexity amd	7.1
2022-05-10	CVE-2021-26353	Improper Initialization vulnerability in AMD products Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity. local low complexity amd CWE-665	7.8
2022-05-10	CVE-2021-26370	Improper Input Validation vulnerability in AMD products Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability. local low complexity amd CWE-20	7.1
2022-05-10	CVE-2021-46771	Unspecified vulnerability in AMD products Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application. local low complexity amd	7.8