milanpi.1.0.0.5

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-09	CVE-2021-26379	Unspecified vulnerability in AMD products Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. network low complexity amd critical	9.8
2023-05-09	CVE-2021-26397	Unspecified vulnerability in AMD products Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability. local low complexity amd	7.1
2023-05-09	CVE-2023-20520	Out-of-bounds Write vulnerability in AMD products Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution. network low complexity amd CWE-787 critical	9.8
2023-05-09	CVE-2023-20524	Out-of-bounds Write vulnerability in AMD products An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity. network low complexity amd CWE-787	7.5
2023-01-11	CVE-2021-26328	Unspecified vulnerability in AMD products Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests. local low complexity amd	4.4