Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-13	CVE-2023-20579	Unspecified vulnerability in AMD products Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability. local low complexity amd	6.0
2024-01-16	CVE-2023-4969	Memory Leak vulnerability in multiple products A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures. local low complexity khronos imaginationtech amd CWE-401	6.5
2023-11-14	CVE-2021-46758	Unspecified vulnerability in AMD products Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity. low complexity amd	6.1
2023-08-08	CVE-2023-20569	Information Exposure Through Discrepancy vulnerability in multiple products A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. local high complexity fedoraproject debian amd microsoft CWE-203	4.7
2023-08-08	CVE-2023-20589	Unspecified vulnerability in AMD products An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. low complexity amd	6.8