romepi.1.0.0.e

DATE	CVE	VULNERABILITY TITLE	RISK
2024-08-13	CVE-2023-20578	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in AMD products A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution. local high complexity amd CWE-367	6.4
2023-11-14	CVE-2021-26345	Out-of-bounds Read vulnerability in AMD products Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service. network low complexity amd CWE-125	4.9
2023-11-14	CVE-2021-46774	Unspecified vulnerability in AMD products Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. network low complexity amd	7.5
2023-05-09	CVE-2021-46756	Improper Input Validation vulnerability in AMD products Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity. network low complexity amd CWE-20 critical	9.1
2023-05-09	CVE-2021-46762	Improper Input Validation vulnerability in AMD products Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service. network low complexity amd CWE-20 critical	9.1
2023-05-09	CVE-2021-46763	Out-of-bounds Write vulnerability in AMD products Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to a loss of integrity. network low complexity amd CWE-787	7.5
2023-05-09	CVE-2021-46764	Out-of-bounds Write vulnerability in AMD products Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service. network low complexity amd CWE-787	7.5
2023-05-09	CVE-2021-46769	Improper Input Validation vulnerability in AMD products Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution. network low complexity amd CWE-20	8.8
2023-05-09	CVE-2021-46775	Improper Input Validation vulnerability in AMD products Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution. low complexity amd CWE-20	6.8
2023-01-11	CVE-2023-20525	Improper Input Validation vulnerability in AMD products Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service. network low complexity amd CWE-20	6.5