RT
Product
Ryzen™ Threadripper™ PRO Processors “Chagall” WS
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 2Low 0
Watch
Add Ryzen™ Threadripper™ PRO Processors “Chagall” WS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46773 | 8.8 | May 9 | Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution Affected: various |
| CVE-2021-46794 | 7.5 | May 9 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data… Affected: various |
| CVE-2021-46755 | 7.5 | May 9 | Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub… Affected: various |
| CVE-2021-46749 | 7.5 | May 9 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data… Affected: various |
| CVE-2021-26356 | 7.4 | May 9 | A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure Affected: various |
| CVE-2021-26371 | 5.5 | May 9 | A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to… Affected: various |
| CVE-2021-26354 | 5.5 | May 9 | Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero,… Affected: various |
Showing 7