Vulnerabilities > AMD > Epyc 9554P Firmware > genoapi.1.0.0.8
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-13 | CVE-2023-20584 | Unspecified vulnerability in AMD products IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity. | 6.0 |
| 2024-08-05 | CVE-2023-31355 | Out-of-bounds Write vulnerability in AMD products Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest. | 6.0 |
| 2024-08-05 | CVE-2024-21978 | Unspecified vulnerability in AMD products Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. | 7.9 |
| 2024-08-05 | CVE-2024-21980 | Out-of-bounds Write vulnerability in AMD products Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity. | 7.9 |
| 2024-02-13 | CVE-2023-31346 | Unspecified vulnerability in AMD products Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests. | 6.0 |
| 2024-02-13 | CVE-2023-31347 | Unspecified vulnerability in AMD products Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity. | 4.9 |
| 2023-08-08 | CVE-2023-20569 | Information Exposure Through Discrepancy vulnerability in multiple products A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. | 4.7 |